Supports application security efforts by assisting with static and dynamic testing, secure code reviews, threat modeling, and vulnerability research under senior mentorship.
Helps triage findings, document risks, contribute to security tooling and automation, and collaborate with engineers to promote secure coding practices.
Participates in manual testing (under guidance) for common vulnerabilities such as SQL injection, XSS, or broken authentication.
Reviews code changes for security issues (often with senior mentorship).
Learns to use tools like SonarQube, Checkmarx, Fortify, or GitHub Advanced Security.
Secures code review by reviewing code changes for security issues.
Documents findings and recommends secure coding practices.
Supports threat modeling exercises by documenting potential attack paths.
Researches emerging vulnerabilities, CVEs, and security advisories relevant to the tech stack.
Tracks security trends and updates the team.
Helps integrate security tools into the CI/CD pipeline.
Writes scripts for automating repetitive tasks (e.g., log parsing, results consolidation).
Supports vulnerability management platforms (e.g., Jira, DefectDojo, Kenna).

Requirements

Currently pursuing a Bachelor’s or Master’s degree in Computer Science, Data Science, Cybersecurity, Information Technology, or a related field
Basic understanding of application security concepts (OWASP Top 10, common web vulnerabilities)
Familiarity with at least one programming or scripting language (Python, JavaScript, Java, or similar)
Understanding of web technologies (HTTP/S, REST APIs, JSON, authentication mechanisms)
Ability to analyze security findings and communicate risks clearly
Strong problem-solving skills and attention to detail
Willingness to learn secure coding practices and security testing tools

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

static testingdynamic testingsecure code reviewsthreat modelingvulnerability researchmanual testingSQL injectionXSSscripting languageweb technologies

Soft Skills

problem-solvingattention to detailcommunicationcollaborationwillingness to learn