VAPT Intern

About the work from home internship

We are preparing for ISO 27001 and SOC 2 audits, and the intern will help collect evidence and update policies. Selected intern's day-to-day responsibilities include:

1. Research new CVEs that affect our stack and summarise them for the team

2. Check AWS and Google Workspace settings against CIS benchmarks

3. Run authenticated vulnerability scans with Nessus or OpenVAS on approved assets.

4. Monitor dependency alerts from Dependabot and Snyk

5. Track open vulnerabilities in Jira and follow up with owners on fixes

Skill(s) required: Wireshark, Burp Suite, SIEM, OWASP Top 10, Vulnerability Assessment, Network Security

Eligibility

1. Students or recent graduates of BIT, BCA, BBA, BBS or a related program

2. Based in Nepal

Stipend: NPR 41,000-NPR 53,000 pcm

Duration: 3 months

Start date: Jan 2027

Perks: Flexible work hours, Performance bonus, Free access to paid learning courses, Certificate, Letter of recommendation

Number of openings: 8

About the company

We run one of the larger SaaS platforms for commercial insurance carriers, processing millions of policy transactions a year. We started in 2003 and have grown to about 16,600 people. Code review is required on every pull request, and nobody merges their own changes.

Duration: 3 months. Start: Jan 2027.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Tamarackwater Pvt Ltd.