Vulnerability Assessment & Web Pentesting Intern

Cehpoint; India; Remote; INR 112,000 - 201,000; Full time

Benefits offered by this job

Official Internship Certificate

Stipend + PPO potential

Job summary

Cehpoint invites aspiring cybersecurity interns to join a hands-on learning track focused on practical penetration testing against real-world systems. You will identify misconfigurations, document remediation steps, and learn under seasoned mentors.

You will perform automated and manual vulnerability assessments using Burp Suite, Nmap, and Nikto, while staying aligned with OWASP Top 10 guidance and industry best practices. A 5-day live technical milestone leads to a formal offer.

Qualifications

• Understanding of OWASP Top 10 web vulnerabilities.
• Basic Linux CLI and networking concepts.
• Hands-on practice on security training platforms like PortSwigger Web Security Academy, TryHackMe, or HackTheBox.
• Passionate about ethical hacking and continuous learning.

Responsibilities

• Conduct automated and manual vulnerability scans on web applications using Burp Suite and open-source scanners.
• Test for common OWASP Top 10 vulnerabilities including IDOR, XSS, CSRF, and SQL Injection.
• Document detailed reproduction steps and proof-of-concept evidence for identified flaws.
• Research emerging CVEs and explore remediation patches.

Skills

OWASP Top 10 knowledge

Burp Suite

Linux CLI

Networking basics

Tools

Burp Suite

Nmap

Nikto

PortSwigger Web Security Academy

TryHackMe

Hack The Box

Job description

You will learn and apply practical penetration testing methodologies against real-world systems, identifying security misconfigurations and documenting remediation steps under seasoned cybersecurity mentors.

OWASP Top 10 Burp Suite Web Vulnerability Assessment Nmap / Nikto Linux CLI Technical Report Writing

Section 02

• Conduct automated and manual vulnerability scans on web applications using Burp Suite and open-source scanners.
• Test for common OWASP Top 10 vulnerabilities including IDOR, XSS, CSRF, and SQL Injection.
• Document detailed reproduction steps and proof-of-concept evidence for identified flaws.
• Research emerging CVEs and explore remediation patches.

Mandatory Foundational Knowledge

• Conceptual knowledge of the OWASP Top 10 web vulnerabilities.
• Basic familiarity with Linux command line and networking concepts.

Mandatory Practical Skills & Architecture

• Hands-on practice on platforms like PortSwigger Web Security Academy, TryHackMe, or HackTheBox.

Problem Solving, Execution Rigor & Curiosity

• Passionate about ethical hacking, cybersecurity defense, and continuous self-study.

5-day live technical evaluation milestone

5-Day Security Lab Milestone: Complete a controlled web vulnerability assessment on our staging testbed and write a clear remediation report (strictly 5 working days). Successful completion triggers immediate official offer letter issuance.

Institutional hiring protocol: candidates who clear resume screening take a live practical milestone of strictly 5 working days. Verifiable completion and code audit by your assigned engineering mentor is the sole prerequisite for the official offer letter.

Compensation, Total Rewards & Advancement

• Monthly stipend ₹10,000–₹18,000 with full PPO potential for top performers.
• Official Cehpoint Cybersecurity Internship Certificate & verifiable credentials.

Dedicated inbox for this role

Questions, private repository links or portfolio references for this opening route straight to the engineering leads reviewing it.