Cybersecurity Student Assistant

Heimstaden; København; Sur place; DKK 167 000 - 234 000; Temps partiel

Résumé du poste

Heimstaden is seeking a Cybersecurity Student Assistant to strengthen the security of its systems and applications. You will investigate vulnerabilities, review security configurations in Azure, Google Cloud, GitHub and Azure DevOps, and help translate technical risks for business teams.

The role offers practical experience in cloud security and collaboration with CISO and IT teams. Ideal candidates are pursuing a cybersecurity or IT-related degree, with a genuine interest in security, strong

Qualifications

• Currently studying cybersecurity, computer science, software engineering or similar.
• Likely near end of Bachelor's or start of Master's.
• Genuine interest in cybersecurity and strong technical mindset.

Responsabilités

• Investigate vulnerabilities and review findings to assess risk and remediation priorities.
• Review security configurations across cloud and services and assist with hardening.
• Support patching, remediation efforts and verification of fixes.
• Explain security findings to technical and business colleagues to improve understanding.

Connaissances

Operating systems basics

Networking concepts

Security problem solving

English communication

Initiative & ownership

Formation

Pursuing Bachelor's degree (CS/Cybersecurity)

Outils

Azure

Google Cloud

GitHub

Azure DevOps

Microsoft security tools

Linux

PowerShell

Python

Description du poste

Are you interested in understanding how systems work, investigating security findings and helping colleagues address the underlying issues?

As a Cybersecurity Student Assistant, you will help strengthen the security of the systems and applications that support Heimstaden's business. Your work will range from investigating vulnerabilities and reviewing security configurations to helping technical teams and business owners understand the risks and agree on what needs to be done.

You will work closely with our CISO, Senior Information Security Officer and colleagues across IT operations and development. This is a practical technical role, with opportunities to work with and get experience with Azure, Google Cloud, GitHub, Azure DevOps and security tools.

You will take ownership of clearly scoped tasks, with guidance from experienced colleagues and increasing responsibility as your skills develop. Technical changes will be planned and carried out together with the teams responsible for the systems.

Key responsibilities

Your tasks will include:

• Investigating vulnerabilities. Review vulnerability findings for servers and applications, help assess the associated risks and support the security team in prioritising remediation efforts.
• Improving security configurations. Help IT operations and development teams review and improve security settings in Azure, Google Cloud, GitHub and Azure DevOps, including access permissions and repository and pipeline settings.
• Supporting patching and remediation. Help test and implement agreed fixes with the responsible teams, follow up on outstanding actions and verify whether vulnerabilities have been addressed.
• Communicating security risks. Explain findings to technical colleagues and business owners so they understand what is affected, why it matters and what action is needed.
• Depending on your interests, skills and experience, you may also help improve security processes and reporting, suggest better ways of working and develop scripts or automation that reduce repetitive work.

We are looking for someone who is technically sharp and enjoys investigating technical problems and wants to understand not just what a security tool reports, but what the finding means, the risk it represents, and how it can be addressed.

You are studying cybersecurity, computer science, software engineering or another relevant IT subject, preferably towards the end of your Bachelor's degree or at the beginning of your Master's degree. Whatever your field of study, you have a genuine interest in cybersecurity and a clear ambition to develop strong technical expertise in this area.

We want to see how you have put that interest into practice, whether through university projects, a home lab, personal projects or a previous student job. What have you built, investigated or tried to secure, and what did you learn from it? Previous work experience in cybersecurity or practical experience with the technologies used in the role is an advantage.

We also expect that you:

• Have a basic understanding of operating systems, networking and common security concepts.
• Enjoy investigating technical problems, understanding their (root) causes and finding practical ways to improve security.
• Can communicate clearly in English and help explain security findings, why they matter and what action is needed to colleagues with different levels of technical knowledge.
• Work systematically, keep track of your tasks and follow through on agreed actions.
• Take initiative, ask questions and recognise when you need guidance or approval, particularly when working with sensitive information or making changes to live/production systems.
• Practical experience with Azure, GitHub, Azure DevOps, Microsoft security tools or Linux is an advantage. Familiarity with vulnerability scanning or scripting in PowerShell or Python is also useful. Your experience can come from your studies, personal projects or previous work.

We do not expect you to know all these tools before joining. However, we do expect genuine technical curiosity, a willingness to learn and an interest in applying what you learn to real security challenges. You will have guidance from experienced colleagues and gradually take on more responsibility as your skills develop and as you deliver good results.

What we offer

• A part-time role (approx. 15-20 hours/week) with flexibility during exam periods
• Close collaboration with the GITS and other Digital teams, where experienced security and IT colleagues can help you broaden your skills and grow both professionally and personally.
• Practical experience with vulnerabilities, cloud security and technical security improvements in a large international company.
• The opportunity to see your work lead to concrete improvements, with responsibilities that grow as your skills develop.
• A culture that brings together sharp minds and encourages you to keep learning, challenge existing ways of working and turn ideas into practical improvemen