Cybersecurity Network Intern
Job Summary
You will join the DPO/InfoSec team to strengthen security posture across cloud, endpoints, and data environments. The role involves supporting ISO 27001 controls and PDPA compliance while gaining hands-on experience in incident response and risk assessment. You will assist in security checks, vulnerability scanning, and the maintenance of security documentation.
Responsibilities
- Perform vulnerability scanning and asset discovery
- Maintain security documentation and ISO 27001 logs
- Support incident triage and risk assessment
- Assist with endpoint and system hardening
Required Skills
- Understanding of network/OS/Identity concepts
- Experience with security tools (Wireshark, Nmap, Nessus, etc.)
- Knowledge of ISO 27001, PDPA, and CIS Controls
- Basic scripting skills (PowerShell, Bash, or Python)
Job Details
Responsibilities:
- Assist with endpoint and M365/Google Workspace security checks, patch status, and baseline hardening (CIS-aligned).
- Run basic network and asset discovery; maintain the IT & Data Asset Register.
- Perform guided scans (e.g., OpenVAS/Nessus/Wazuh) on approved assets, triage findings, and document remediation plans.
- Contribute to the Risk Register (likelihood × impact) and track mitigations.
- Draft/update SOPs, policies, and evidence logs for ISO 27001 Annex A controls and PDPA obligations (consent, retention, access).
- Help with security awareness content (phishing drills, micro-training).
- Support triage, timeline building, and post-incident RCA & CAPA documentation for minor incidents.
- Assist vendor/security due diligence checklists, access reviews, and join change-management walk-throughs.
- Keep clean records: control evidence, change logs, exception registers, and audit-ready folders.
Requirements:
- Currently pursuing a Diploma/Degree in Cybersecurity, Computer Science, IT/Networking or related.
- Basics in networks, operating systems, and identity access concepts.
- Familiar with any of: Wireshark, Nmap, Burp Suite, OpenVAS/Nessus, Wazuh/Splunk, Microsoft Defender, CrowdStrike/EDR (nice to have).
- Awareness of OWASP Top 10, CIS Controls, NIST CSF, ISO/IEC 27001/27002, PDPA (training will be provided).
- Comfortable with documentation and simple scripting (PowerShell/Bash/Python is a plus).
- Clear communicator, detail-oriented, curious, and ethical.