Security Operations Intern

Kharchenko Threat Labs is a small team of former military and law enforcement analysts doing pen tests and incident response. Every report is written by the person who did the testing, not a separate writing team. Training budget covers one SANS course or equivalent per year.

The internship:

Kharchenko Threat Labs is looking for a cyber security intern to support our small security team with monitoring, testing and documentation. This role is fully remote within Ukraine. Good written English matters here, since most updates are written.

Day to day:

• Check AWS and Google Workspace settings against CIS benchmarks
• Track open vulnerabilities in Jira and follow up with owners on fixes
• Help review access lists and remove accounts that are no longer needed
• Update security policies and runbooks in Confluence
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious
• Research new CVEs that affect our stack and summarise them for the team
• Write clear findings with severity, impact and steps to fix

What we're looking for:

• Based in Ukraine for the duration of the internship
• Eligible to work in Ukraine
• Hands-on practice through TryHackMe, Hack The Box or college labs
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope
• Willing to complete a basic background check before access is granted
• Own laptop that can run a virtual machine, and a stable internet connection
• Comfortable on the Linux command line

Bonus points:

• CTF participation or published writeups
• Knowledge of cloud security in AWS or Azure

What you get out of it:

• Certificate and recommendation letter on completion
• How audit evidence, policies and technical controls fit together
• Writing findings that engineers can fix without a long back-and-forth

Duration: 4 months

Start date: Feb 2027

Stipend: UAH 35,000 to UAH 43,000 per month

What we offer:

• Mentorship
• Possibility of a full-time offer
• Internet allowance
• Online learning budget
• Letter of recommendation
• Company laptop

We may close this posting early once we have enough applications.

Duration: 4 months. Start: Feb 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Kharchenko Threat Labs.