VAPT Intern

WHO WE ARE

Certifications include ISO 27001 and SOC 2 Type II, and we hold partner status with Microsoft, Cisco and VMware.

OVERVIEW

Remote internship on the Governance and Compliance team. You will work on our own systems only, with written permission and a clear scope for any testing. You can work from home anywhere in India. We have no office requirement.

RESPONSIBILITIES

• Track open vulnerabilities in Jira and follow up with owners on fixes
• Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious
• Triage phishing emails reported by staff and update block lists
• Write clear findings with severity, impact and steps to fix
• Update security policies and runbooks in Confluence

WHO CAN APPLY

• Have a working laptop and a stable internet connection
• Are able to join within 15 days
• Available for a full-time (work from home) internship for the full duration
• Basic knowledge of common web attacks such as XSS, SQL injection and CSRF
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope
• Comfortable on the Linux command line
• Hands-on practice through TryHackMe, Hack The Box or college labs

PREFERRED

• CTF participation or published writeups
• Familiarity with ISO 27001 or NIST frameworks

WHAT YOU'LL LEARN

• How audit evidence, policies and technical controls fit together
• You will work on real security alerts and vulnerability findings, not lab exercises
• Writing findings that engineers can fix without a long back-and-forth
• Mentoring from a security engineer with weekly check-ins

Duration: 2 months

Start date: Immediately

Stipend: ₹24,000-₹33,000/month

WHAT WE OFFER

• Letter of recommendation
• Free access to paid learning courses
• Informal dress code
• 5 days a week
• Mentorship from senior team members

Duration: 2 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Ironwoodkit IT.