Cybersecurity Intern – Offensive Security

CloudSEK; Bengaluru; On-site; INR 279,000 - 446,000; Part time

Job summary

CloudSEK in Bengaluru is seeking an intern to join a team at the intersection of threat intelligence, security consulting, and product strategy. You’ll gain hands‑on exposure to XVigil, BeVigil, SVigil, and related platforms, and learn how findings translate into client‑facing deliverables.

You will perform VAPT across web, API, mobile, and cloud, triage findings, and help shape product decisions. The role offers real client exposure, mentorship, and a chance to contribute to security research

Qualifications

• Strong interest in cybersecurity, threat intelligence, or security research.
• Working knowledge of VAPT across web, API, mobile, or cloud.
• Familiar with CVEs, IOCs, TTPs, exposed credentials, attack surface concepts.
• Excellent written and verbal communication; able to present findings.
• Currently pursuing or recently completed CS/InfoSec degree.

Responsibilities

• Perform VAPT across web, API, mobile, and cloud; triage findings and translate into issues.
• Feed VAPT results back into product; flag gaps, false positives, and missed detections.
• Track threat landscape and monitor dark web feeds; flag relevant chatter.
• Run HUMINT/OSINT collection and map intel to prospects or lead-gen angles.
• Build or use automation to reduce manual steps in research and reporting.
• Research exposed credentials and misconfigurations across client footprints.
• Help build client-facing deliverables: trial summaries and security reports.
• Communicate findings on calls with prospects; translate tech to business impact.
• Assist with competitive/market research on threat intel vendors.
• Contribute to product strategy discussions on new detection use cases.

Skills

Cybersecurity interest

VAPT knowledge

Communication skills

OSINT familiarity

Security research interest

Education

CS/InfoSec degree

Tools

XVigil

BeVigil

SVigil

GTI

AIVigil

Job description

We are a bunch of super enthusiastic, passionate, and highly driven people, working to achieve a common goal! We believe that work and the workplace should be joyful and always buzzing with energy!

CloudSEK, one of India’s most trusted Cyber security product companies, is on a mission to build the world’s fastest and most reliable AI technology that identifies and resolves digital threats in real-time. The central proposition is leveraging Artificial Intelligence and Machine Learning to create a quick and reliable analysis and alert system that provides rapid detection across multiple internet sources, precise threat analysis, and prompt resolution with minimal human intervention. Founded in 2015, headquartered at Singapore, we are proud to say that we’ve grown at a frenetic pace and have been able to achieve some accolades along the way, including:

CloudSEK’s Product Suite:

• CloudSEK XVigil constantly maps a customer’s digital assets, identifies threats and enriches them with cyber intelligence, and then provides workflows to manage and remediate all identified threats including takedown support.
• A powerful Attack Surface Monitoring tool that gives visibility and intelligence on customers’ attack surfaces. CloudSEK's BeVigill uses a combination of Mobile, Web, Network and Encryption Scanners to map and protect known and unknown assets.
• CloudSEK’s Contextual AI SVigil identifies software supply chain risks by monitoring Software, Cloud Services, and third-party dependencies.

Key Milestones:

• 2016: Launched our first produc
• 2018: Secured Pre-series A fundin
• 2019: Expanded operations to India, Southeast Asia, and the America
• 2020: Won the NASSCOM-DSCI Excellence Award for Security Product Company of the Year.
• 2021: Raised $7M in Series A funding led by MassMutual Ventures.

Awards & Recognition: Won NetApp Excellerator's "Best Growth Strategy Award," CloudSEK XVigil joined NVIDIA Inception Program, and won the NASSCOM Emerge 50 Cybersecurity Award:

• 2025: Secured $19 million in funding led by Tenacity Ventures, Commvault.

Note: We will be conducting a hiring CTF as part of the selection process for this role. The date and other relevant details will be shared with shortlisted candidates.

About the Role

CloudSEK is looking for an intern to join a team that sits at the intersection of threat intelligence, security consulting, and product strategy. You'll get hands‑on exposure to our core platform, XVigil (external threat intelligence, dark web monitoring, EASM), BeVigil, SVigil, GTI, and AIVigil (AI attack surface monitoring), and to how findings from that platform turn into client‑facing deliverables and product decisions.

What You'll Do:

• Perform VAPT across web, API, mobile, and cloud; triage findings surfaced by BeVigil/SVigil and turn them into concrete, prioritized issues.
• Feed VAPT and triage experience back into product: flag gaps, false positives, and missed detection classes based on hands‑on testing and industry‑wide understanding of the product line.
• Track the threat landscape across the Americas; closely monitor underground/dark web feeds and proactively flag relevant chatter, leaks, or actor activity.
• Run HUMINT/OSINT collection, infrastructure hunting, and C2 mapping, and map resulting intel to specific prospects, customers, or lead‑gen angles.
• Build or use automation (scripts, workflows) to cut down redundant manual steps in research, triage, and reporting.
• Research exposed credentials, misconfigurations, leaked assets, and attack surface findings across client and prospect footprints - Validate and assess the impact of findings (e.g. determine if a leaked token or exposed API is a real risk vs. a placeholder/example value)
• Help build client‑facing deliverables: trial summaries, responsible disclosure reports, CISO‑ready security impact summaries.
• Communicate findings directly on calls with prospects, clearly and confidently, translating technical detail into business impact.
• Assist with competitive and market research on the threat intel and cybersecurity vendor landscape.
• Contribute to product strategy discussions around new detection use cases and roadmap prioritization.

What We're Looking For

• Strong interest in cybersecurity, threat intelligence, or security research
• Working knowledge of VAPT methodology across at least two of: web, API, mobile,cloud
• Familiarity with core concepts: CVEs, IOCs, TTPs, exposed credentials, attack surface management, OSINT, HUMINT
• Comfortable reading technical documentation (APIs, specs, security reports) and writing clearly about what it means
• Strong written and verbal communication; comfortable presenting findings on live prospect/client calls
• Currently pursuing or recently completed a degree in Computer Science, Information Security, or related field

Nice to Have

• Prior CTF, bug bounty, or independent security research experience
• Experience with dark web/underground forum monitoring, C2 infrastructure mapping, or threat actor tracking
• Exposure to digital risk protection or supply chain risk concepts
• Interest in how security products get positioned and sold, not just built

What You'll

• GainDirect mentorship from CloudSEK's security consulting and research team
• Real client and prospect exposure, not simulated exercises
• End‑to‑end view of how a research finding becomes a report, a sales conversation, or a product feature.