Offensive Security Intern

About PoCForge
PoCForge is a cyber security company specialising in penetration testing and offensive security. We help organisations find and fix real, exploitable weaknesses before attackers do, and we back every finding with a clear proof of concept. Learn more at https://pocforge.com
About the Role
We're looking for a hungry, hands-on Offensive Security Intern to join our remote team. You'll work alongside experienced pentesters on real client engagements, learning how professional security assessments are scoped, executed and reported. This is a learning-heavy role: you'll break things (legally), write about it clearly, and grow fast.
What You'll Do
Assist with web application, API, network and cloud penetration tests under senior guidance
Perform reconnaissance, enumeration and vulnerability discovery using manual techniques and tools
Validate findings and help build reproducible proofs of concept
Document vulnerabilities with clear impact, risk ratings and remediation steps
Help draft professional client reports and executive summaries
Research new attack techniques, CVEs and tooling, and share what you learn with the team
Contribute to internal tooling, scripts, labs and PoCForge's security content
What We're Looking For
Solid understanding of networking fundamentals (TCP/IP, DNS, HTTP/S) and how web applications work
Familiarity with the OWASP Top 10 and common vulnerability classes (XSS, SQLi, SSRF, IDOR, auth flaws, etc.)
Hands-on experience with tools such as Burp Suite, Nmap, Metasploit, ffuf/gobuster or similar
Comfort working in Linux and the command line
Basic scripting ability in Python, Bash or similar
Strong curiosity, a hacker mindset and a strong sense of ethics
Clear written English; you can explain a technical issue simply
Nice to Have
Active profile on Hack The Box, TryHackMe, PortSwigger Academy, or CTF experience
Bug bounty findings, CVEs, write-ups, a blog or a GitHub with security projects
Certifications or ongoing study such as eJPT, CEH, PNPT, OSCP or similar
Exposure to Active Directory, cloud (AWS/Azure/GCP) or mobile app testing
What You'll Get
Real-world experience on live client engagements, not just labs
Mentorship from working offensive security professionals
Fully remote work with a flexible, outcome-focused culture
Internship certificate and a letter of recommendation based on performance
A potential path to a full-time role at PoCForge
How to Apply
Apply through LinkedIn with your resume. Bonus points for including links to your HTB/THM profile, CTF write-ups, bug bounty reports or GitHub. We value proof of skill over paper credentials.
PoCForge is an equal opportunity employer. We welcome applicants of all backgrounds.

Work arrangement
Yes