Information Security Intern

About the work from home internship

We are preparing for ISO 27001 and SOC 2 audits, and the intern will help collect evidence and update policies. Selected intern's day-to-day responsibilities include:

1. Update security policies and runbooks in Confluence

2. Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets.

3. Monitor dependency alerts from Dependabot and Snyk.

4. Track open vulnerabilities in Jira and follow up with owners on fixes

5. Help review access lists and remove accounts that are no longer needed

6. Write clear findings with severity, impact and steps to fix

7. Research new CVEs that affect our stack and summarise them for the team

Skill(s) required: OWASP Top 10, Wireshark, Linux

Who should apply

1. Available for the full internship period

2. Based in Sri Lanka

3. Own laptop and a reliable internet connection

4. Undergraduates or recent graduates in IT, computer science, management or a related field

Stipend: LKR 55,000 - LKR 61,000 per month

Duration: 6 months | Start date: Jan 2027

Perks: Free access to paid learning courses, Flexible work hours, 5 days a week, Letter of recommendation, Certificate, Mentorship from senior team members

Number of openings: 2

About the company

Headquartered in Colombo since 1987, the company now sells in 40 countries and supports customers in 11 languages. We run one of the larger SaaS platforms for commercial insurance carriers, processing millions of policy transactions a year. We started in 1987 and have grown to about 470 people. We keep recurring meetings to Tuesdays and Thursdays where we can.

Include your expected salary and earliest start date with your application.

Duration: 6 months. Start: Jan 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Curlew Systems.