VAPT Intern

Large rollouts are routine here, such as imaging 12,000 laptops for a state agency over one summer. We're looking for a VAPT Intern. We are preparing for ISO 27001 and SOC 2 audits, and the intern will help collect evidence and update policies. You will intern remotely with our team in Los Angeles. We have hosted remote interns from several countries before. You will need at least 3 hours of overlap with US Pacific time. A stable internet connection and a backup power option are required.

You'll help with:

Check AWS and Google Workspace settings against CIS benchmarks. Help review access lists and remove accounts that are no longer needed. Monitor dependency alerts from Dependabot and Snyk. Triage phishing emails reported by staff and update block lists. Track open vulnerabilities in Jira and follow up with owners on fixes.

You should be:

Own laptop and a reliable internet connection. Available for at least 30 hours a week from home. Some scripting in Python or Bash. Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls. Basic knowledge of common web attacks such as XSS, SQL injection and CSRF.

3 months, starting Dec 2026. Stipend: BDT 38,000-BDT 44,000 per month.

Perks: Flexible work hours, Certificate, Free access to paid learning courses, Letter of recommendation, Laptop provided for the internship, Informal dress code.

Tell us your notice period and what salary you are looking for.

Duration: 3 months. Start: Dec 2026.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Paddockworth IT, LLC.