Security Test Engineer (Red Team) - Intern

Hands-on internship focusing on vulnerability assessment and penetration testing, and offensive security operations.

This role requires a mandatory 2-year commitment (1 year internship + 1 year full-time employment after successful conversion) Upon successful full-time conversion, the internship duration will be considered as relevant work experience.

• Identify security vulnerabilities, configuration weaknesses and potential attack paths within authorised environments.
• Assist in conducting vulnerability assessments and penetration testing of web applications, networks, APIs, servers and endpoints.
• Perform security testing using approved tools and methodologies under the supervision of senior security professionals.
• Support web application testing for common vulnerabilities such as SQL injection, cross-site scripting, authentication weaknesses and access-control issues.
• Assist in network reconnaissance, port scanning, service enumeration and vulnerability validation.
• Document identified vulnerabilities with supporting evidence, risk ratings, business impact and recommended remediation measures.
• Coordinate with Blue Team and infrastructure teams to communicate findings and improve defensive controls.
• Stay updated on emerging vulnerabilities, attack techniques, OWASP guidelines and Red Team security tools.

• Must have completed formal training in Red Team or Security Testing from any recognized training institute.
• Prior hands-on experience with VAPT tools such as Burp Suite, Nmap, Metasploit, Nessus, and OWASP ZAP through training or lab environments.
• Good understanding of web application and network vulnerabilities, including OWASP Top 10 and common attack vectors
• Ability to perform basic vulnerability assessments and penetration testing, including reconnaissance, scanning, exploitation, and reporting.
• Should have good written and verbal communication skills in English