Security Engineer - Intern

VisionRoot (Pvt) Ltd is looking for a motivated Cybersecurity Engineer Intern to join our team.
This is an opportunity for a student or early-career cybersecurity enthusiast who wants to gain practical experience in application security, vulnerability assessment, secure development, security testing, and cybersecurity operations while working with a growing technology company.
What you will do
Assist in identifying and assessing security risks across web applications, APIs, mobile applications, and infrastructure.
Perform basic vulnerability assessments and security testing under authorized environments.
Assist with identifying common web application vulnerabilities.
Test applications against security best practices such as the OWASP Top 10.
Review application configurations and security controls.
Assist developers in identifying and fixing security vulnerabilities.
Perform basic security testing of REST APIs.
Review authentication, authorization, session management, and access-control implementations.
Assist with testing input validation and protection against common injection vulnerabilities.
Monitor application logs and security-related events.
Assist with security incident investigation and documentation when required.
Perform basic network and infrastructure security checks.
Assist with secure configuration of development and deployment environments.
Review dependencies and identify known security vulnerabilities.
Assist with security scanning and vulnerability-management activities.
Support secure CI/CD and DevSecOps practices.
Help implement security checks within development workflows.
Assist in security documentation, reports, checklists, and remediation tracking.
Work with Software Engineers, DevOps Engineers, QA Engineers, and Project Managers to improve application security.
Participate in security reviews during the software development lifecycle.
Research emerging cybersecurity threats, vulnerabilities, tools, and best practices.
Assist with security awareness and internal cybersecurity activities.
Maintain confidentiality and follow responsible security practices at all times.
What we are looking for
Currently pursuing a degree, diploma, or higher education in Cybersecurity, Information Security, Computer Science, Software Engineering, Information Technology, or a related field.
Basic understanding of cybersecurity concepts and principles.
Understanding of networking fundamentals such as TCP/IP, DNS, HTTP/HTTPS, ports, and common protocols.
Basic understanding of web application security.
Familiarity with the OWASP Top 10.
Basic understanding of authentication and authorization.
Familiarity with Linux and command-line environments.
Basic knowledge of Git and GitHub.
Basic understanding of databases and SQL.
Familiarity with HTTP requests, REST APIs, and JSON.
Good analytical and problem-solving skills.
Strong attention to detail.
Good communication and teamwork skills.
Willingness to learn and research new cybersecurity technologies.
Strong sense of ethics and responsible handling of security information.
Proactive attitude and ability to take ownership of assigned tasks.
Nice to have
Experience with security testing tools such as Burp Suite, OWASP ZAP, Nmap, Wireshark, or similar tools.
Familiarity with Kali Linux or other security-focused Linux distributions.
Experience testing web applications and REST APIs.
Knowledge of OWASP Web Security Testing Guide.
Understanding of common vulnerabilities such as SQL Injection, XSS, CSRF, SSRF, IDOR, authentication issues, and security misconfigurations.
Basic understanding of API security and OAuth/JWT.
Familiarity with vulnerability scanners and security assessment tools.
Experience with SAST, DAST, dependency scanning, or other application-security tools.
Basic knowledge of Docker and container security.
Familiarity with cloud security concepts across Azure, AWS, or Google Cloud.
Understanding of DevSecOps and secure CI/CD pipelines.
Experience with GitHub Actions, GitLab CI/CD, Jenkins, or similar tools.
Familiarity with secrets management and environment security.
Basic understanding of Linux server security.
Knowledge of network security, firewalls, VPNs, and intrusion detection concepts.
Familiarity with security logging and monitoring tools.
Basic understanding of cryptography and secure data handling.
Experience with Python, JavaScript/TypeScript, Bash, or another scripting language.
Familiarity with security frameworks such as NIST, CIS Controls, or ISO 27001.
Experience with threat modeling and security risk assessment.
Understanding of secure software development lifecycle practices.
Cybersecurity certifications such as Security+, CEH, eJPT, or relevant coursework are an advantage.
Personal cybersecurity projects, CTF participation, labs, GitHub repositories, or security research demonstrating practical skills.
What you will gain
Hands-on experience with real-world cybersecurity and application-security activities.
Practical experience identifying and addressing security vulnerabilities.
Experience with web application, API, and infrastructure security testing.
Exposure to OWASP security practices and secure software development.
Experience working with cybersecurity and security-testing tools.
Exposure to DevSecOps, CI/CD, cloud security, and secure deployment practices.
Experience collaborating with Software Engineers, DevOps Engineers, QA Engineers, and other technical teams.
Understanding of how security is integrated throughout the Software Development Lifecycle (SDLC).
Mentorship and technical guidance from experienced team members.
Opportunities to improve technical, analytical, and security skills.
Experience contributing to internal and client projects and strengthening your cybersecurity portfolio.
Benefits
Flexible working schedule.
Fully remote working environment.
Monday–Friday working schedule.
Hands-on experience with real-world cybersecurity activities.
Opportunity to work with modern security tools and technologies.
Mentorship and technical guidance.
Exposure to Web, Mobile, Cloud, DevOps, AI, and Software Security.
Collaborative and learning-focused environment.
Opportunity to build practical cybersecurity experience and strengthen your portfolio.

Work arrangement
Yes