This is a remote position.
The Junior Application Security Engineer Internship Program at EncryptEdge Labs provides a comprehensive, hands-on learning experience focused on securing modern applications. Over eight weeks, interns will work through carefully crafted challenges covering key areas of application security, including secure code analysis, vulnerability assessment, penetration testing, and implementing secure development practices.
Participants will gain practical expertise in identifying and mitigating vulnerabilities, using industry-standard tools like SAST, DAST, and code review platforms. The program concludes with a capstone project where interns apply their knowledge to secure a mock application and prepare a comprehensive security report. This internship is ideal for those aspiring to specialize in application security and contribute to building safer software.
- Learn and implement secure software development practices.
- Conduct Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
- Perform vulnerability assessments and penetration testing on web and mobile applications.
- Identify and mitigate OWASP Top 10 and CWE vulnerabilities.
- Collaborate on securing APIs, databases, and cloud-based applications.
- Complete a final capstone project to secure a mock application and present findings.
- Write detailed security assessment reports, including remediation recommendations.
Requirements
Core Qualities:
-
A strong passion for application security, secure coding, and ethical hacking.
-
Detail-oriented mindset with the ability to analyze and identify vulnerabilities in web and software applications.
-
Exceptional documentation and reporting skills, capable of clearly articulating findings and remediation steps.
-
Strong communication and collaboration skills, especially when working with developers and security teams.
-
Consistent commitment to meeting deadlines and maintaining a high standard of work.
Educational and Learning Background:
-
A degree in Computer Science, Software Engineering, or Information Security is preferred but not mandatory.
-
Demonstrated self-learning through certifications, projects, or participation in bug bounty programs, CTFs, or online labs.
Foundational Knowledge:
-
Understanding of web technologies and architectures (HTML, CSS, JavaScript, APIs, databases).
-
Basic familiarity with network protocols (HTTP/HTTPS, DNS, TCP/IP) and operating systems (Windows/Linux).
-
Awareness of the OWASP Top 10 and common web vulnerabilities.
Certifications (Desirable):
-
TryHackMe Web Fundamentals or Web Hacking Path.
-
eLearnSecurity Junior Penetration Tester (eJPT) or Web Application Penetration Tester (eWPT).
-
CompTIA Security+ or Pentest+ (optional for entry-level candidates).
Recommended Courses:
-
Web Application Security for Beginners (TryHackMe or HackTheBox).
-
OWASP Top 10: Web Application Security for Developers (Udemy or Pluralsight).
-
Bug Bounty Hunting – Web Hacking by The Cyber Mentor.
Key Skillset:
-
Foundational understanding of web application vulnerabilities such as SQL injection, XSS, CSRF, and insecure deserialization.
-
Ability to perform basic vulnerability scanning, manual testing, and input validation assessments.
-
Understanding of secure software development lifecycle (SDLC) and DevSecOps concepts.
-
Knowledge of ethical and legal standards in web security testing.
Technical Tool Familiarity:
-
Experience with tools such as:
-
Burp Suite, OWASP ZAP, and Nikto for web application testing.
-
Kali Linux, Nmap, and Metasploit (for reconnaissance and exploitation).
-
Source code analysis tools such as SonarQube or Semgrep (optional).
-
-
Basic scripting ability in Python, JavaScript, or Bash for automation and testing.
Logistics and Preparedness:
-
Access to a dedicated computer and a reliable internet connection.
-
Ability to set up and maintain a secure testing environment (guidance and resources will be provided).
Preferred Experience:
-
Practical exposure to web security labs, CTF challenges, or bug bounty platforms (e.g., HackTheBox, TryHackMe, PortSwigger Labs).
-
Personal or academic projects demonstrating an understanding of application security or secure coding practices.
Benefits
Skills Required
- Passion for application security, secure coding, and ethical hacking
- Detail-oriented ability to analyze and identify vulnerabilities in web and software applications
- Strong documentation and security reporting skills
- Strong communication and collaboration skills
- Ability to meet deadlines and maintain a high standard of work
- Degree in Computer Science, Software Engineering, or Information Security
- Demonstrated self-learning through certifications, projects, bug bounty programs, CTFs, or online labs
- Understanding of web technologies and architectures, including HTML, CSS, JavaScript, APIs, and databases
- Basic familiarity with HTTP/HTTPS, DNS, TCP/IP, Windows, and Linux
- Awareness of the OWASP Top 10 and common web vulnerabilities
- Foundational knowledge of SQL injection, XSS, CSRF, and insecure deserialization
- Ability to perform basic vulnerability scanning, manual testing, and input validation assessments
- Understanding of secure SDLC and DevSecOps concepts
- Knowledge of ethical and legal standards in web security testing
- Familiarity with Burp Suite, OWASP ZAP, Nikto, Kali Linux, Nmap, and Metasploit
- Basic scripting ability in Python, JavaScript, or Bash
- Access to a dedicated computer and reliable internet connection
- Ability to set up and maintain a secure testing environment
- Practical exposure to web security labs, CTFs, or bug bounty platforms
- Personal or academic projects demonstrating application security or secure coding knowledge
- TryHackMe, eJPT, eWPT, CompTIA Security+, or CompTIA Pentest+ certifications
What We Do
EncryptEdge Labs is a cutting-edge cybersecurity company offering comprehensive services such as penetration testing, threat intelligence, incident response, cloud security, and compliance consulting, alongside training and internships.
