Intern - Offensive Security
About the role
NodeRisk is seeking an Offensive Security Intern to assist with penetration testing and red team operations. The role involves supporting web, API, cloud, and infrastructure security testing, working alongside senior pentesters on live client engagements and internal R&D for their AI-driven pentesting platform. Key responsibilities include executing penetration tests, supporting API and cloud security assessments, participating in vulnerability validation and exploitation, documenting findings, and aiding automation workflows. Candidates should have a strong grasp of cybersecurity fundamentals, be familiar with common pentesting tools, and possess basic knowledge of OWASP Top 10, authentication, and Linux scripting. The internship offers hands-on experience, mentorship, exposure to AI-assisted pentesting, and the possibility of full-time employment.
Must have
- Strong understanding of cybersecurity fundamentals (CIA triad, networking, HTTP, DNS).
- Familiarity with common pentesting tools: Burp Suite, Nmap, Metasploit, SQLmap, ffuf
- Basic knowledge of: OWASP Top 10 Authentication and session management Linux command line and scripting basics
Nice to have
- Experience with bug bounty platforms (HackerOne, Bugcrowd, Intigriti, YesWeHack etc).
- Knowledge of scripting/programming: Python, Bash, JavaScript
- Exposure to Active Directory attacks
- Familiarity with cloud security tools and concepts
Technologies
- Active Directory
- API Security
- Authentication
- AWS
- Azure
- Bash
- Burp Suite
- Cloud Security
- Cybersecurity
- DNS
- IAM
- JavaScript
- JWT
- Linux
- Metasploit
- Nmap
- OAuth
- OWASP
- Penetration Testing
- Python
Highlights
The internship lasts 3–6 months and can be remote or hybrid depending on availability. There is potential for full-time conversion based on performance.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka