Penetration Testing Intern

About the work from home internship

Remote internship on the Security Operations team. You will work on our own systems only, with written permission and a clear scope for any testing. Selected intern's day-to-day responsibilities include:

1. Research new CVEs that affect our stack and summarise them for the team

2. Check AWS and Google Workspace settings against CIS benchmarks.

3. Prepare short security awareness posts and quizzes for staff

4. Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious.

5. Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets.

6. Monitor dependency alerts from Dependabot and Snyk.

7. Help review access lists and remove accounts that are no longer needed

Skill(s) required: Ethical Hacking, Linux, OWASP Top 10, Network Security, Nmap, Wireshark

Who should apply

1. Have their own laptop and a reliable internet connection, ideally with a UPS backup

2. Available for at least 30 hours a week, work from home

3. Based anywhere in Pakistan

4. Final-year students or fresh graduates of BSCS, BSSE, BBA or a related program

Stipend: PKR 95,000 - PKR 105,000 per month

Duration: 3 months | Start date: Dec 2026

Perks: Letter of recommendation, Pre-placement offer (PPO) for strong performers, 5 days a week, Mentorship from senior team members, Performance bonus, Free access to paid learning courses

Number of openings: 2

About the company

Based in San Francisco, San Francisco InfoSec also trains client staff and runs simulated phishing campaigns. We started in 2019 and have grown to about 70 people. We write internal post-mortems after every major engagement, including what went wrong.

Duration: 3 months. Start: Dec 2026.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at San Francisco InfoSec LLC.