Ethical Hacking Intern

The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk. We're looking for an Ethical Hacking Intern. We are preparing for ISO 27001 and SOC 2 audits, and the intern will help collect evidence and update policies. You can work from home anywhere in Pakistan. We have no office requirement. Weekday working hours, with room to shift your day when needed.

What you will do

• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets
• Update security policies and runbooks in Confluence
• Monitor dependency alerts from Dependabot and Snyk
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious
• Research new CVEs that affect our stack and summarise them for the team

You should be

• Available for at least 30 hours a week, work from home
• Final-year students or fresh graduates of BSCS, BSSE, BBA or a related program
• Hands-on practice through TryHackMe, Hack The Box or college labs
• Comfortable on the Linux command line
• Some scripting in Python or Bash

6 months, starting Dec 2026. Stipend: PKR 58,000 - PKR 59,000 per month.

Perks: Job offer on successful completion, 5 days a week, Free access to paid learning courses, Letter of recommendation, Mentorship from senior team members.

We may close this posting early once we have enough applications.

Duration: 6 months. Start: Dec 2026.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at BFR InfoSec.