NodeRisk is looking for a highly motivated Offensive Security Intern to support our penetration testing and red team operations. This internship is ideal for someone passionate about ethical hacking, vulnerability research, and real-world security testing across web, API, cloud, and infrastructure environments.

You will work closely with senior pentesters and contribute to live client engagements as well as internal R&D for our AI-driven continuous pentesting platform.

Key Responsibilities

• Assist in executing Web, Mobile Application Penetration Testing (OWASP Top 10, business logic flaws, IDOR, auth bypass).
• Support API Security Testing including JWT/OAuth flows, rate-limit testing, and access control validation.
• Perform Network & Infrastructure Assessments (external/internal scanning, service enumeration, misconfigurations).
• Help with Cloud Security Testing (AWS/Azure basics, IAM weaknesses, exposed services).
• Participate in vulnerability validation, exploitation (where authorized), and proof-of-concept development.
• Document findings clearly for inclusion in professional pentest reports.
• Support internal automation workflows and tool integrations for NodeRisk’s agent-driven pentesting engine.

Required Skills & Knowledge

• Strong understanding of cybersecurity fundamentals (CIA triad, networking, HTTP, DNS).
• Familiarity with common pentesting tools: Burp Suite, Nmap, Metasploit, SQLmap, ffuf
• Basic knowledge of:
• OWASP Top 10 Authentication and session management Linux command line and scripting basics

Preferred Qualifications (Nice to Have)

• Experience with bug bounty platforms (HackerOne, Bugcrowd, Intigriti, YesWeHack etc).
• Knowledge of scripting/programming: Python, Bash, JavaScript
• Exposure to Active Directory attacks
• Familiarity with cloud security tools and concepts

What You Will Gain

• Hands-on experience with real-world pentesting engagements.
• Mentorship from experienced offensive security engineers.
• Exposure to AI-assisted continuous pentesting workflows.
• Opportunity to contribute to cutting-edge security automation at NodeRisk.
• Potential for full-time conversion based on performance.

Internship Details

• Duration: 3–6 months
• Location: Remote / Hybrid (based on availability)