Security Research - LIA/Internship (Unpaid)

Detectify; Stockholms kommun; On-site; SEK 156,000 - 212,000; Full time

Job summary

Detectify is seeking a student for a 6-month LIA internship at our Stockholm office. The role focuses on validating and implementing PoCs into our scanners, with opportunities to work on vulnerability research alongside our expert team.

You will develop modules from vulnerability reports using a JSON-based DSL or Go, and participate in code reviews to ensure accuracy and quality across security tests. This is a hands-on, collaborative environment in a global security network.

Qualifications

• Student currently enrolled and seeking a 6-month LIA placement.
• Interest in internet security and vulnerability research.
• Hands-on experience with bug bounties, CTFs, or similar is a plus.

Responsibilities

• Validate and implement proof-of-concepts into Detectify scanners.
• Communicate with internal security researchers to gather information about vulnerabilities.
• Develop modules from vulnerability reports using a JSON-based DSL or Go.
• Perform code reviews to ensure accuracy and reduce false positives.
• Monitor module behavior to identify false positives/negatives.
• Support continuous automation of module development.

Skills

JSON-based DSL

Module development

Code reviews

Security research mindset

Tools

Go

Job description

What We Do At Detectify

We’re Detectify, and we’re not your average cybersecurity company. We’re a team obsessed with building cutting-edge tech that actually makes a difference in making the internet a safer place. We’re talking about real-life hackers who know their stuff—you’ll learn from the best and join a team that combines human ingenuity with automation to streamline asset discovery and vulnerability assessments.

What We Do At Detectify

We’re Detectify, and we’re not your average cybersecurity company. We’re a team obsessed with building cutting-edge tech that actually makes a difference in making the internet a safer place. We’re talking about real-life hackers who know their stuff—you’ll learn from the best and join a team that combines human ingenuity with automation to streamline asset discovery and vulnerability assessments.

The Vulnerability Assessment Research team

This team is currently composed of security researchers focused on making sure that the members of Detectify Crowdsource - our network of ethical hackers - are engaged and enjoying the best possible experience when collaborating with Detectify. When our hackers submit a vulnerability through our Crowdsource platform, our team builds a module for it and adds it to the Detectify service. Once a vulnerability is reported to us, it becomes a security test which is then made available to all our customers - this is how Detectify combines automation and crowdsourcing. These tests come in various unique flavors and are driven by crowdsourced security knowledge. We in the Vulnerability Assessment Research team are responsible for validating, configuring, and executing such tests on our customers’ web applications. We aim for the best possible scanning performance with comprehensive coverage of possible security issues, optimizing for flow, fast feedback, and quality. We follow lean and DevOps concepts, aiming to be innovative and helpful, and to have a strong sense of ownership of all the things we build.

What You'll Get To Do

As a Security Researcher, your main responsibility will be to validate and implement proof of concepts, uploaded by our Crowdsource and internal researchers, into our scanners. This is a great opportunity to boost your knowledge around hacking and vulnerabilities.

Other Responsibilities Include

• Communicate with our internal security researchers in order to gather all necessary information to understand the submitted vulnerabilities.
• Develop modules from vulnerability reports using a JSON-based DSL or Go.
• Perform code reviews to ensure accuracy and reduce false positives.
• Consistently review behavior of implemented modules to identify false positives or negatives.
• Work with continuous automation of module development.

Who You Are

We believe that you are a student and want to do your LIA (work placement) with us here at Detectify for a period of 6 months. You are a highly versatile and self-motivated individual who can create and drive change. You are involved with the security community and understand how vulnerabilities work. You have a strong interest in internet security and you want to engage with an international network of security researchers. Ideally, you have some hands-on experience with bug bounties, CTFs (Capture the Flag), or similar.

So, what do you think?

We are proud to foster an inclusive workplace free from discrimination. We strongly believe that diversity of experience, perspectives, and backgrounds will lead to a better environment for our employees and a better product. This is something we value deeply and we encourage everyone to be a part of changing the way the world thinks about security! Go hack yourself!

Location

This is an on-site position is for our office in Gamla stan, Stockholm.

So, what do you think?

We are proud to foster an inclusive workplace free from discrimination. We strongly believe that diversity of experience, perspectives, and background will lead to a better environment for our employees and a better product. This is something we value deeply and we encourage everyone to be a part of changing the way the world thinks about security! Go hack yourself!

Detectify sets a new standard for advanced application security testing, challenging traditional Dynamic Application Security Testing (DAST) by providing evolving coverage of each and every exposed asset across the changing attack surface. AppSec teams trust Detectify to expose how attackers will exploit their Internet-facing applications. The Detectify platform automates continuous real-world, payload-based attacks fuelled by its global community of elite ethical hackers into its own expert-built engines, exposing critical weaknesses before it's too late. Go hack yourself.