VAPT Intern

Help desk calls are answered from 7 a.m. to 7 p.m., with an on-call tech covering nights and weekends. We started in 2013 and have grown to about 140 people.

Overview:

This is a blue team internship first. Most days involve reviewing alerts, checking configurations and writing up findings. Remote within Sri Lanka. The team meets in Colombo once a quarter, travel covered.

What you'll do:

• Research new CVEs that affect our stack and summarise them for the team.
• Write clear findings with severity, impact and steps to fix.
• Check AWS and Google Workspace settings against CIS benchmarks.
• Help review access lists and remove accounts that are no longer needed.
• Prepare short security awareness posts and quizzes for staff.
• Test our own web apps for OWASP Top 10 issues using Burp Suite, within the agreed scope.

Who can apply:

• Own laptop and a reliable internet connection.
• Available for the full internship period.
• Based in Sri Lanka.
• Undergraduates or recent graduates in IT, computer science, management or a related field.
• Pursuing a degree in Computer Science, IT, Cyber Security or a related field, graduating in 2026 or 2027.
• Own laptop that can run a virtual machine, and a stable internet connection.
• Hands-on practice through TryHackMe, Hack The Box or college labs.
• Willing to complete a basic background check before access is granted.

Bonus points:

• Knowledge of cloud security in AWS or Azure.
• Experience with Wireshark, Nmap or Burp Suite.
• Familiarity with ISO 27001 or NIST frameworks.

Duration: 4 months

Start date: Immediately

Stipend: LKR 46,000 - LKR 63,000 pcm

Perks:

• Job offer on successful completion.
• 5 days a week.
• Performance bonus.
• Internet allowance.
• Free access to paid learning courses.
• Letter of recommendation.

Please include your notice period and salary expectations.

Duration: 4 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at HDJ Tech Support.