Cybersecurity Intern

Cybersecurity Intern
Web-app VAPT and AI report verification.
Flexible, task based · Remote, India · Up to six months · Unpaid
The Role at a Glance
COMPANY Tips to Secure Private Limited
LOCATION Remote (India)
JOB TYPE Internship, flexible and task based
EXPERIENCE No prior experience required, students especially welcome
EDUCATION Any discipline, current students welcome
DURATION Up to six months (indicative, may conclude earlier)
STIPEND Unpaid
Who We Are
Tips to Secure Private Limited is a cybersecurity company. We are building Bhedan, an
autonomous adversarial AI for offensive security testing. It does not just scan: it reasons
like a pentester, chains findings into working exploits, and produces plain English proof of
concept reports. We are pre-revenue and early stage, with the MVP still in build and not
yet public.
About the Role
Bhedan is an AI-powered penetration-testing engineer, an LLM “brain” backed by a
security-knowledge RAG, that finds real web-app vulnerabilities and proves each one with
a replayable PoC.
Bhedan finds the bugs. You are the human who proves they are real.
As our human in the loop, you verify every vulnerability it reports: confirm the true
positives, catch the false positives, and make sure each finding holds up. If you love
breaking web apps, live in Burp Suite, and believe a “finding” isn’t real until you’ve proven it,
this is for you.
What You’ll Do
• Run Bhedan against deliberately vulnerable lab targets (DVWA, Juice Shop, WebGoat,
and more)
• Verify what Bhedan reports: reproduce the PoC and label each finding true or false
positive, with evidence
• Manually validate findings in Burp Suite (Proxy, Repeater, Intruder)
• Write clear, reproducible notes: payload, steps, request and response, screenshot
• Give feedback on report quality and flag detection gaps Bhedan missed
• As you grow, verify findings on real, authorized engagements through our partner
network, scoped, consented, and under NDA
What We’re Looking For
Students especially welcome. We care about the fundamentals below and your raw
potential, not years of experience or the length of your resume. If you’re a current
student with the basics, you’re exactly who we’re looking for.
• Solid grasp of the OWASP Top 10 and common web vulnerabilities (SQLi, XSS, CSRF,
IDOR, auth and session)
• Hands-on Burp Suite (intercept, replay, tamper)
• How the web works: HTTP, headers, cookies, sessions
• Basic AI, LLM and RAG literacy, and why an AI can be confidently wrong, since you’ll be
verifying its output
• Intellectual honesty: never call it exploitable unless you’ve proven it
• Professionalism and confidentiality: real client work is under NDA, strictly in scope
• Clear written communication
Bonus Points
A student with only the must-haves above is exactly who we want. Anything here is a small
plus, never an expectation.
• CTF or bug-bounty experience
• Familiarity with nuclei, sqlmap, ffuf, nmap
• Basic scripting (Python or Bash)
• Prior exposure to AI or LLM tooling and prompt-based workflows
What You’ll Get
• Paid lab access. Practice and test on real vulnerable environments, on us.
• Pre-release access. Hands-on with a cutting-edge AI pentesting product.
• Real-world experience. Exposure to actual authorized engagements, which is rare in
an internship.
• Mentorship. Work directly with experienced security professionals.
• Certificate and letter of recommendation. Issued on performance.
• Flexible, task-based schedule. Work when it suits you.
TIPS TO SECURE PRIVATE LIMITED · CIN U62011GJ2026PTC182360
Tel +91 94098 00020 · Email support@tipstosecure.com · www.tipstosecure.com
How to Apply
Email us your resume, and use the body of the mail to introduce yourself: a vulnerability
you are proud of finding, a CTF you loved, what you are curious about, and why this role. A
few honest lines are worth more than a long letter.
EMAIL TO dharmesh.ram@tipstosecure.com
CC support@tipstosecure.com
SUBJECT Application for Cybersecurity Intern, [your name]

Work arrangement
Yes