Penetration Testing Intern

Our field services team covers retail chains, hospitals and banks, dispatching technicians to over 4,000 sites. Certifications include ISO 27001 and SOC 2 Type II, and we hold partner status with Microsoft, Cisco and VMware. We started in 2010 and have grown to about 430 people.

About the role:

Remote internship on the Application Security team. You will work on our own systems only, with written permission and a clear scope for any testing. Our headquarters is in London, and about a third of the team works remotely from other countries. The internship is fully remote. Interns join our London team on daily calls and get a named mentor. You will need to be available during UK office hours, at least until 3:00 PM GMT. You need a reliable internet connection and somewhere quiet to work.

Responsibilities:

• Test our own web apps for OWASP Top 10 issues using Burp Suite, within the agreed scope
• Track open vulnerabilities in Jira and follow up with owners on fixes
• Research new CVEs that affect our stack and summarise them for the team
• Update security policies and runbooks in Confluence
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious
• Collect evidence for ISO 27001 and SOC 2 audit controls
• Prepare short security awareness posts and quizzes for staff

Requirements:

• Students currently pursuing B.Tech, BE, BCA, MCA, B.Sc or a related degree, or fresh graduates (between December 2027 and June 2028 batch)
• Own a laptop and have stable internet at home
• Can commit full time, from home, for the whole internship
• Women returning to work after a career break are welcome to apply
• Pursuing a degree in Computer Science, IT, Cyber Security or a related field, graduating in between December 2027 and June 2028
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls
• Own laptop that can run a virtual machine, and a stable internet connection
• Available 30 to 40 hours a week for 6 months
• Basic knowledge of common web attacks such as XSS, SQL injection and CSRF
• Willing to complete a basic background check before access is granted

Nice to have:

• CompTIA Security+, CEH, eJPT or a similar certification

Duration: 6 months

Start date: Jan 2027

Stipend: ₹43,000 - ₹48,000/month

What we offer:

• Laptop provided for the internship
• Pre-placement offer (PPO) for strong performers
• Certificate
• Internet allowance

Duration: 6 months. Start: Jan 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Lakecraft Computer Services Ltd.