Cybersecurity Intern
Job Summary
This is a cybersecurity internship focused on UEBA monitoring, security research, and penetration-testing support under supervision. The intern will also handle documentation such as weekly records, vulnerability trackers, and test matrices. Candidates should have an understanding of Malaysia's PDPA 2010 and ISO/IEC 27001 controls.
Responsibilities
- Perform UEBA monitoring and anomaly flagging
- Conduct security research and propose improvements
- Support penetration-testing using OWASP ZAP, Burp Suite, and Kali Linux
- Maintain documentation including weekly records and vulnerability trackers
Required Skills
- Understanding of Malaysia's PDPA 2010
- Working awareness of ISO/IEC 27001 Annex A controls
- Proficiency with OWASP ZAP, Burp Suite, and Kali Linux
- Knowledge of safe-testing discipline and OWASP Testing Guide
Job Details
UEBA monitoring (no server access): review the external read-only dashboard, triage would-be actions, compile per-subject-type measurements and flag anomalies — no SSH, production or database access.
Security research: review and extend the team's research and propose practical improvements that raise the security posture.
Penetration-testing support: where asked, test with OWASP ZAP, Burp Suite and Kali Linux — scope- locked, test accounts only, rate-limited per the Rules of Engagement — capturing evidence and drafting findings for review.
Documentation: weekly records, vulnerability tracker, test matrices and reports under supervision.
Requirements
PDPA: understands Malaysia's PDPA 2010 (consent, purpose, data minimisation, retention, security) and applies it — the product must meet PDPA requirements.
ISO/IEC 27001: working awareness of the relevant Annex A controls and able to document observations from his own perspective.
Tools: OWASP ZAP, Burp Suite and Kali Linux, with OWASP Testing Guide and safe-testing discipline (scope, RoE, rate-limiting, test accounts).