Unqork empowers enterprises to accelerate growth by rapidly building, testing, and running AI-powered applications that embody the future of enterprise development. Trusted by the world's largest organizations in highly regulated industries, these applications become more secure over time while significantly reducing technical debtallowing businesses to focus on innovation rather than maintenance. Unqork's customers include Goldman Sachs, Marsh, BlackRock, and the U.S. Department of Health and Human Services.
_At Unqork, we value inclusive and innovative thinkers who boldly challenge the status quo. We encourage you to apply!_
We are looking to hire an **Intern** to join our Product Security team .
**Title:** Intern-Web Application Penetration Tester
**Department:** Product Security
**Reports to:** Director, Product Security
**Type:** Paid Internship $30/hr
We are looking to hire an **Intern- Web Application Penetration Tester** to join our product security team. This role is designed for rising seniors or a recent college graduate with a strong foundational background in Computer Science or Cybersecurity who wants to transition theoretical knowledge into real-world ethical hacking. In this role, you won't just run automated scanners. You will actively dissect complex web applications, hunt for business logic flaws, and evaluate the security posture of our emerging AI and Large Language Model (LLM) integrations.
**_What Impact U would make_**
* **Vulnerability Assessment & Pentesting:** Assist in conducting manual and automated penetration tests on web application and APIs to identify security vulnerabilities (OWASP Top 10).
* **AI/LLM Security Evaluation:** Help assess the security of AI-driven features and LLM implementations, checking for vulnerabilities like prompt injection, data poisoning, insecure output handling, and model denial of service (OWASP Top 10 for LLMs).
* **Exploitation & PoC Development:** Safely demonstrate the impact of discovered vulnerabilities by creating clear Proof-of-Concept (PoC) exploits.
* **Documentation & Reporting:** Write comprehensive, technical security reports detailing findings, exploitation paths, risk ratings, and actionable remediation steps for development teams.
* **Collaboration:** Work closely with software engineers to explain security flaws and guide them on secure coding best practices and remediation verification.
**_What U bring:_**
* Currently pursuing an undergraduate or graduate degree in Computer Science, Cybersecurity, or a related field.
* Demonstrates a strong interest in cybersecurity and a commitment to staying current on emerging threats, security risks, attack vectors, and industry best practices.
* Possesses exceptional attention to detail and strong organizational skills.
* Excellent written and verbal communication abilities, with the capacity to convey technical information clearly and effectively.
* Confident and comfortable collaborating with peers, cross-functional teams, and management-level stakeholders.
* Proven ability to prioritize and manage multiple responsibilities while working independently in a fast-paced, dynamic environment.
**_Preferred Traits:_**
* Curious and proactive problem solver
* Process-oriented with a continuous improvement mindset
* Comfortable working with ambiguity and learning new systems quickly
* Collaborative team player with a strong sense of ownership
Unqork embraces a culture of security and privacy awareness by consistently safeguarding sensitive information, adhering to company policies, and actively participating in training and initiatives to protect our data and the privacy of our stakeholders.
Unqork is an equal opportunity employer. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.
Apply for this Job👉 Please reference you found the job on Remote Hits, this helps us get more companies to post here, thanks!
When applying for jobs, you should NEVER have to pay to apply. You should also NEVER have to pay to buy equipment which they then pay you back for later. Also never pay for trainings you have to do. Those are scams! NEVER PAY FOR ANYTHING! Posts that link to pages with "how to work online" are also scams. Don't use them or pay for them. Also always verify you're actually talking to the company in the job post and not an imposter. A good idea is to check the domain name for the site/email and see if it's the actual company's main domain name. Scams in remote work are rampant, be careful! Read more to avoid scams. When clicking on the button to apply above, you will leave Remote Hits and go to the job application page for that company outside this site. Remote Hits accepts no liability or responsibility as a consequence of any reliance upon information on there (external sites) or here.