Red Team & AppSec Intern - Hybrid (Cologne)

United States Digital Space LLC; Cologne; Hybride; EUR 17 000 - 28 000; Temps partiel

Avantages offerts par ce poste

Hybrid work in Cologne

Mentorship by CTO

Flexible hours

Résumé du poste

Cologne, Germany-based SaaS security team seeks a Working Student or Intern for a Hybrid role on our red team. You will learn to think like an attacker and help identify and fix security issues in our systems.

You will test apps, re-test past findings, and automate security checks in CI. You’ll review features before they ship and contribute to AI/SRE security efforts, working closely with the CTO and engineers.

Qualifications

• Enrolled student in CS/IT security or related field.
• Genuine interest in offensive security; participates in CTFs or similar.
• Basic grasp of how web apps and HTTP work (requests, headers, auth).
• Comfortable with command line and at least one scripting language (Python/JS/TS/Go).
• Careful with sensitive information; stay within scope and handle findings responsibly.
• Fluent English (working language).
• Able to be in Cologne office regularly; hybrid role.

Responsabilités

• Test our apps and APIs for vulnerabilities across authentication and authorization, injections, misconfigurations, and secrets.
• Re-test past findings from previous pentests and verify fixes.
• Automate security checks in CI to surface issues early (secret, dependency, code scanning).
• Review new features for security before they ship.
• Run authorized social engineering exercises under CTO-approved scope and learn from results.
• Explore prompts and agent security for AI SRE components.
• Document findings clearly and drive them to a fix.

Connaissances

Offensive security interest

Web app basics

Scripting languages

English fluency

Cologne office presence

Student status

Formation

CS/IT security student

Outils

Burp Suite

OWASP ZAP

AWS

Kubernetes

Description du poste

Cologne, Germany-based SaaS security team seeks a Working Student or Intern for a Hybrid role on our red team. You will learn to think like an attacker and help identify and fix security issues in our systems.

You will test apps, re-test past findings, and automate security checks in CI. You’ll review features before they ship and contribute to AI/SRE security efforts, working closely with the CTO and engineers.