Security Engineering Intern

Who we are:

Kharchenko Threat Labs is a small team of former military and law enforcement analysts doing pen tests and incident response. Every report is written by the person who did the testing, not a separate writing team. Training budget covers one SANS course or equivalent per year.

Overview:

Kharchenko Threat Labs is looking for a cyber security intern to support our small security team with monitoring, testing and documentation. This role is fully remote within Ukraine. You can set your own hours around a daily morning check-in. We use Slack, Notion and Google Meet. Cameras on for team calls.

What you'll do:

• Collect evidence for ISO 27001 and SOC 2 audit controls.
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets.
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious.
• Monitor dependency alerts from Dependabot and Snyk.
• Triage phishing emails reported by staff and update block lists.
• Write clear findings with severity, impact and steps to fix.
• Check AWS and Google Workspace settings against CIS benchmarks.

What we're looking for:

• Based in Ukraine for the duration of the internship.
• Eligible to work in Ukraine.
• Currently enrolled in a bachelor's or master's degree, graduating 2027 or 2028.
• Available for the full internship period.
• Willing to complete a basic background check before access is granted.
• Comfortable on the Linux command line.
• Hands-on practice through TryHackMe, Hack The Box or college labs.
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope.
• Some scripting in Python or Bash.

Duration: 6 months

Start date: Jan 2027

Stipend: UAH 35,000-UAH 38,000 monthly

What we offer:

• Company laptop.
• Letter of recommendation.
• Possibility of a full-time offer.
• Mentorship.
• Certificate of completion.

Shortlisted candidates will hear from us within two weeks.

Duration: 6 months. Start: Jan 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Kharchenko Threat Labs.