VAPT Intern

Products include endpoint protection, email security and a cloud posture management platform. We operate security operations centres on three continents, so alerts are triaged by analysts on day shift wherever they arrive. We started in 1992 and have grown to about 3,500 people.

Internship overview

Nowak Cyber is hiring a VAPT Intern for Jan 2027. Remote internship on the Governance and Compliance team. You will work on our own systems only, with written permission and a clear scope for any testing. We are headquartered in Gilbert and have been hiring remotely since 2020. Remote internship with a team based in Gilbert. The stipend is paid at the end of each month. You will need at least 4 hours of overlap with US Central time.

Responsibilities

• Test our own web apps for OWASP Top 10 issues using Burp Suite, within the agreed scope.
• Check AWS and Google Workspace settings against CIS benchmarks.
• Prepare short security awareness posts and quizzes for staff.
• Collect evidence for ISO 27001 and SOC 2 audit controls.
• Update security policies and runbooks in Confluence.
• Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious.

What we're looking for

• Have a working laptop and a stable internet connection.
• Are available for a full-time work from home internship for the entire duration.
• Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls.
• Basic knowledge of common web attacks such as XSS, SQL injection and CSRF.
• Hands-on practice through TryHackMe, Hack The Box or college labs.
• Some scripting in Python or Bash.
• Available 30 to 40 hours a week for 6 months.
• Strong sense of ethics. You will see sensitive data and must stay strictly within scope.

Preferred qualifications

• Familiarity with ISO 27001 or NIST frameworks.

What you get out of it

• Mentoring from a security engineer with weekly check-ins.
• Writing findings that engineers can fix without a long back-and-forth.
• Certificate and recommendation letter on completion.

Program dates: Jan 2027, 1 month.

Pay: $500 - $700/month

Perks

• Pre-placement offer (PPO) for strong performers.
• Job offer on successful completion.
• Letter of recommendation.
• Mentorship from senior team members.
• 5 days a week.
• Free access to paid learning courses.

Duration: 1 month. Start: Jan 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Nowak Cyber.