VAPT Intern

Small enough that you will talk to clients directly in your first week. Since 2016, growth has come by referral, mostly from auditors and insurance brokers. Nobody gets in trouble for clicking a test phish. You report it and move on.

The internship:

We are preparing for ISO 27001 and SOC 2 audits, and the intern will help collect evidence and update policies. Remote within India. The team meets in Gurugram once a quarter, travel covered. Standard office hours, Monday to Friday, with flexibility around them.

What you'll do:

Test our own web apps for OWASP Top 10 issues using Burp Suite, within the agreed scope. Collect evidence for ISO 27001 and SOC 2 audit controls. Review alerts in our SIEM (Wazuh or Splunk) and escalate anything suspicious. Write clear findings with severity, impact and steps to fix. Research new CVEs that affect our stack and summarise them for the team. Help review access lists and remove accounts that are no longer needed. Monitor dependency alerts from Dependabot and Snyk. Update security policies and runbooks in Confluence.

Who can apply:

Students currently pursuing B.Tech, BE, BCA, MCA, B.Sc or a related degree, or fresh graduates (2026, 2027 or 2028 batch). Are available for a full-time work from home internship for the entire duration. Own a laptop and have stable internet at home. Hands-on practice through TryHackMe, Hack The Box or college labs. Strong sense of ethics. You will see sensitive data and must stay strictly within scope. Own laptop that can run a virtual machine, and a stable internet connection. Good understanding of networking basics: TCP/IP, DNS, HTTP, ports and firewalls. Some scripting in Python or Bash.

Preferred:

Basic understanding of Active Directory. Familiarity with ISO 27001 or NIST frameworks.

What you get out of it:

Hands-on time with SIEM, scanning and cloud security tools. Certificate and recommendation letter on completion. Writing findings that engineers can fix without a long back-and-forth. Mentoring from a security engineer with weekly check-ins.

Duration: 2 months

Start date: Immediately

Stipend: ₹26,000 - ₹34,000/month

Perks:

Performance bonus. Free access to paid learning courses. Pre-placement offer (PPO) for strong performers. Informal dress code. Laptop provided for the internship. Certificate.

Please submit your CV in English.

Duration: 2 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Russetbrook Security.