Information Security Placement

Who we are

Most engagements start with a vulnerability scan and a tabletop exercise with the client's leadership.

About the role

This is a blue team internship first. Most days involve reviewing alerts, checking configurations and writing up findings. The company is based in Berlin, Germany. The team is spread across multiple countries. The internship is fully remote. Interns join our Berlin team on daily calls and get a named mentor. Working hours overlap with Central European Time. A stable internet connection and a backup power option are required.

What you'll do

• Triage phishing emails reported by staff and update block lists.
• Prepare short security awareness posts and quizzes for staff.
• Write clear findings with severity, impact and steps to fix.
• Help review access lists and remove accounts that are no longer needed.
• Check AWS and Google Workspace settings against CIS benchmarks.
• Monitor dependency alerts from Dependabot and Snyk.

Requirements

• Available for the full internship period.
• Currently enrolled in a bachelor's or master's degree, graduating 2027.
• Based in Kenya for the duration of the internship.
• Eligible to work in Kenya.
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope.
• Basic knowledge of common web attacks such as XSS, SQL injection and CSRF.
• Hands-on practice through TryHackMe, Hack The Box or college labs.
• Own laptop that can run a virtual machine, and a stable internet connection.

Nice to have

• Basic understanding of Active Directory.

Duration: 3 months

Start date: Dec 2026

Stipend: $500 to $600 monthly

Perks

• Letter of recommendation.
• Certificate of completion.
• Mentorship.
• Possibility of a full-time offer.

Duration: 3 months. Start: Dec 2026.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Mossbrook Labs.