Cyber Security Intern

TrustFabric; Karnataka; Hybrid; INR 30,000 - 36,000; Full time

Benefits offered by this job

Mentorship

PPO potential

Certificate/Recommendation

Job summary

TrustFabric is seeking a Cyber Security Intern to join our engineering and compliance teams in Bangalore. This hands-on role works on a live product, focusing on application and cloud security, with exposure to DPDP Act data protection concepts.

You'll perform vulnerability assessments, assist in code reviews, monitor cloud infrastructure (AWS/Azure), and contribute to incident response playbooks while gaining practical privacy-tech experience in a regulated space.

Qualifications

• Pursuing or recently completed degree in CS/IT/Cybersecurity or related field.
• Foundational security knowledge: network/web security and crypto basics.
• Familiarity with scripting (Python/Bash/JavaScript).
• Exposure to security tools via coursework/CTFs/personal projects.
• Interest in data privacy law and DPDP concepts is a plus.
• Attention to detail with a documentation-first approach.

Responsibilities

• Assist in vulnerability assessments and basic penetration testing of web apps and APIs.
• Support security code reviews and triage findings from SAST/DAST tools.
• Monitor logs/alerts across cloud infrastructure (AWS/Azure).
• Help maintain incident response and breach playbooks (DPDP 72-hour window).
• Contribute to access control, encryption, and data classification reviews.
• Research emerging threats and summarize findings for the team.
• Support security documentation for due-diligence/audit requests (SOC-2 evidence).
• Assist with security awareness content for internal training.

Skills

Python

Bash

JavaScript

OWASP Top 10

Data privacy awareness

Documentation

Written communication

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Burp Suite

Nmap

Wireshark

Cloud platforms basics

Job description

About the Role

We're looking for a Cyber Security Intern to work alongside our engineering and compliance teams on securing a platform that handles sensitive consent records, PII, and audit trails for enterprise customers across regulated industries. This is hands-on security work on a live product — not a shadowing role.

You'll get exposure to application security, cloud infrastructure security, and the practical side of DPDP Act / data protection compliance — a rare combination for an internship in India's privacy-tech space.

What You'll Do

• Assist in vulnerability assessments and basic penetration testing of our web application and APIs
• Support security code reviews and help triage findings from SAST/DAST tools
• Monitor logs and alerts for anomalous activity across our cloud infrastructure (AWS/Azure)
• Help maintain and test incident response and breach notification playbooks (including DPDP Act's 72-hour breach window)
• Contribute to access control, encryption, and data classification reviews as part of our PII Dictionary and Data Discovery features
• Research emerging threats relevant to consent/identity platforms and summarise findings for the team
• Support security documentation needed for customer due-diligence and audit requests (SOC-2 style evidence, security questionnaires)
• Assist with security awareness content for internal training

What We're Looking For

• Currently pursuing or recently completed a degree in Computer Science, IT, Cybersecurity, or a related field
• Foundational understanding of network security, web application security (OWASP Top 10), and basic cryptography concepts
• Familiarity with at least one of: Python, Bash, or JavaScript for scripting
• Exposure to security tools (Burp Suite, Nmap, Wireshark, or similar) through coursework, CTFs, or personal projects
• Curiosity about data privacy law and how security and compliance intersect — prior exposure to GDPR/DPDP concepts is a plus, not required
• Strong attention to detail and a methodical, documentation-first approach
• Good written communication — you'll be writing findings, not just finding them

Nice to Have

• CTF participation, bug bounty write-ups, or a security-focused GitHub/portfolio
• Any security certifications in progress (CEH, Security+, eJPT, etc.)
• Basic familiarity with cloud platforms (AWS/Azure/GCP)

Why Intern With Us

• Direct mentorship from engineering and compliance leads — small team, real ownership
• Work on a product actively used by regulated enterprises (BFSI, healthcare) where security mistakes have real consequences
• Front-row seat to how India's newest data protection law is being operationalised
• Certificate, letter of recommendation, and potential PPO (pre-placement offer) based on performance

Pay: From ₹3,000.00 per month

Benefits

• Paid time off
• Work from home

Education

• Bachelor's (Preferred)

Work Location: Hybrid remote in Bangalore City, Bengaluru, Karnataka