Information Security Placement

Who we are

Certifications across the team include OSCP, GPEN and CISSP. Since 2020, growth has come by referral, mostly from auditors and insurance brokers.

Overview

This is a blue team internship first. Most days involve reviewing alerts, checking configurations and writing up findings. Our team is spread across 8 countries. Headquarters is in Los Angeles. Remote internship with a team based in Los Angeles. The stipend is paid at the end of each month. You will need at least 3 hours of overlap with US Pacific time. We use Slack, Notion and Google Meet. Cameras on for team calls.

What you'll do

• Test our own web apps for OWASP Top 10 issues using Burp Suite, within the agreed scope
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious
• Prepare short security awareness posts and quizzes for staff
• Help review access lists and remove accounts that are no longer needed
• Triage phishing emails reported by staff and update block lists
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets
• Collect evidence for ISO 27001 and SOC 2 audit controls
• Monitor dependency alerts from Dependabot and Snyk

What we're looking for

• Currently enrolled in a bachelor's or master's degree, graduating 2026 or 2027
• Based in Germany for the duration of the internship
• Basic knowledge of common web attacks such as XSS, SQL injection and CSRF
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls
• Some scripting in Python or Bash
• Comfortable on the Linux command line
• Hands-on practice through TryHackMe, Hack The Box or college labs

Nice to have

• Familiarity with ISO 27001 or NIST frameworks
• Knowledge of cloud security in AWS or Azure

Duration: 6 months

Start date: Immediately

Stipend: €2,900 - €3,800 monthly

What we offer

• Flexible hours
• Letter of recommendation
• Online learning budget
• Mentorship
• Certificate of completion
• Internet allowance

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Sandhills Cyber.