Cyber Security Intern (Self-Funded)

Description

This self-funded internship is designed for aspiring security analysts and ethical hackers seeking verifiable, real-world project experience. Participants will work through structured practical assignments simulating enterprise security assessments, conduct vulnerability audits on Real World Project, analyze attack telemetry, and author professional industry-grade remediation reports under technical guidance.

Responsibilities

• - Conduct web application vulnerability assessments focusing on OWASP Top 10 vectors (SQL Injection, XSS, Broken Access Control, SSRF).
• - Perform network scanning, port enumeration, and service vulnerability auditing using tools such as Nmap and Nessus/OpenVAS.
• - Analyze network packet captures (Wireshark) and server event logs to identify potential attack patterns and misconfigurations.
• - Execute controlled exploitation scenarios in sandboxed environments using frameworks such as Metasploit and Burp Suite.
• - Author clear, actionable Vulnerability Assessment and Penetration Testing (VAPT) reports complete with CVSS scoring, impact analysis, and remediation steps.

Requirements

• - Foundational understanding of computer networking concepts (TCP/IP model, DNS, HTTP/HTTPS protocols, ports, and subnets).
• - Working knowledge of Linux command-line environments (Kali Linux, Ubuntu) and basic Windows security controls.
• - Familiarity with core ethical hacking methodologies and the standard vulnerability lifecycle.
• - Strong written communication skills for technical documentation and security auditing reports.
• - Dedication to commit 10–15 hours per week throughout the program duration.

Nice to Have

• - Prior practice or profile ranking on platforms like TryHackMe, Hack The Box, or PortSwigger Web Security Academy.
• - Basic scripting knowledge in Python, Bash, or PowerShell for security task automation.
• - Familiarity with foundational certifications (e.g., CompTIA Security+, CEH, or eJPT).

What You'll Learn

• - End-to-end VAPT methodology applied to web applications, networks, and server configurations.
• - Interception, traffic manipulation, and manual request auditing using Burp Suite Professional/Community.
• - Identification and exploitation of severe web logic flaws and access control bypasses.
• - Industry-standard reporting standards, including executive summaries, technical walkthroughs, and risk prioritization.

What We Offer

• - Hands-on access to guided, structured security lab environments and simulated engagement workflows.
• - Review, critique, and feedback on your technical security audit reports from experienced practitioners.
• - Sanitized, portfolio-ready security case studies suitable for resumes and LinkedIn profiles.