Website:
osto.one
Job details:
Location: Gurugram (On-site)
Duration: 6 Months
Stipend: ₹25,000 per month
About Osto
Osto is a protection-first cybersecurity platform helping startups become enterprise-ready through security, compliance, and continuous protection across cloud, endpoints, applications, networks, and infrastructure.
We're building the cybersecurity platform we wish startups had from day one.
The Role
We're looking for a VAPT Intern who wants to build a career in offensive security.
This is a hands-on internship where you'll work on real client engagements across web applications, APIs, mobile applications, source code reviews, and cloud infrastructure. You'll work closely with our VAPT Lead and learn how professional security assessments are scoped, executed, reported, and retested.
This is not a shadowing internship. You'll test real targets, think critically, and take ownership of the findings you produce.
What You'll Do
- Support VAPT engagements across web, API, mobile, and cloud environments.
- Identify vulnerabilities including authentication flaws, access control issues, injection vulnerabilities, and security misconfigurations.
- Assist with source code reviews and cloud security assessments.
- Document findings with clear technical details, business impact, and remediation recommendations.
- Validate fixes through retesting and confirm vulnerabilities have been properly resolved.
- Work closely with senior security engineers throughout the assessment lifecycle.
What We're Looking For
- eJPT or CEH certification (mandatory).
- Pursuing or recently completed a degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Strong understanding of networking, web applications, and Linux fundamentals.
- Basic scripting skills in Python or Bash.
- Hands-on exposure through TryHackMe, Hack The Box, CTFs, or bug bounty programs.
Bonus Points
- OSCP in progress or other advanced offensive security certifications.
- Vulnerability disclosure or bug bounty experience.
What You'll Gain
- End-to-end exposure to real-world VAPT engagements.
- Work closely with the founders on real customer security challenges.
- Opportunity for a full-time role based on performance.
Click on Apply to know more.