Penetration Testing Intern

Government contractors use our services to prepare for CMMC assessments and NIST 800-171 compliance. We started in 2018 and have grown to about 90 people.

About the role:

This is a blue team internship first. Most days involve reviewing alerts, checking configurations and writing up findings. The company is based in New York City, the US. The team is spread across multiple countries. Remote internship with a team based in New York City. The stipend is paid at the end of each month. You will need at least 4 hours of overlap with US Eastern time. Strong written English is important, since much of our work is async.

Day to day:

• Prepare short security awareness posts and quizzes for staff
• Test our own web apps for OWASP Top 10 issues using Burp Suite, within the agreed scope
• Research new CVEs that affect our stack and summarise them for the team
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets
• Monitor dependency alerts from Dependabot and Snyk
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious
• Check AWS and Google Workspace settings against CIS benchmarks
• Collect evidence for ISO 27001 and SOC 2 audit controls

Who can apply:

• Available for a full-time (work from home) internship for the full duration
• Can start immediately or within two weeks
• Have a working laptop and a stable internet connection
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope
• Basic knowledge of common web attacks such as XSS, SQL injection and CSRF
• Willing to complete a basic background check before access is granted
• Pursuing a degree in Computer Science, IT, Cyber Security or a related field, graduating in 2026 or 2027
• Hands-on practice through TryHackMe, Hack The Box or college labs

What you get out of it:

• Mentoring from a security engineer with weekly check-ins
• Certificate and recommendation letter on completion
• You will work on real security alerts and vulnerability findings, not lab exercises
• Hands-on time with SIEM, scanning and cloud security tools

Duration: 4 months

Start date: Within 2 weeks

Stipend: ₹45,000-₹54,000 monthly

What we offer:

• 5 days a week
• Flexible work hours
• Letter of recommendation

Duration: 4 months. Start: Within 2 weeks.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Tillerdesk InfoSec.