CyberSecurity Internship

The work centres on finding security weaknesses in a gaming platform and its supporting systems, then helping get them fixed, always with permission and inside set boundaries.

• Scan the platform's APIs, web endpoints and any services open to the outside, and confirm each finding is real before it goes into a report.
• Run network vulnerability scans over the servers, datacenter systems and wider infrastructure the company has cleared, and help flag misconfigurations or services left open.
• Review Windows virtual machines in sanctioned environments for unpatched software, weak settings, privilege problems and known vulnerabilities.
• Help with fixes by verifying patches, running hardening checks, rescanning, and tracking each issue until it is closed.
• Write reports that set out each vulnerability, how severe the risk is, which assets it touches and what to change, addressed to the engineering and infrastructure teams.
• Work alongside senior colleagues on controlled validation and assessment, staying inside the authorised scope.
• Study new threats that bear on APIs, Windows, servers and gaming infrastructure, and contribute to better security overall.

The post names no degree or year of study. What it does ask for:

• Genuine interest in infrastructure security, network scanning, security testing of APIs and hardening Windows VMs.
• The ability to write up findings in a clear way and talk with technical teams.

Preferred, though not mandatory:

• Knowing where ethical hacking limits lie, how responsible disclosure works, and why you stay inside approved scope. This is marked as highly preferred.
• Some scripting in Python, PowerShell or Bash, described as a plus.
• Practical exposure through labs, CTFs, personal builds or academic cybersecurity projects, described as an advantage.

The internship is in Mumbai and the post states a hybrid work mode.

• Set up a deliberately vulnerable app on your own machine, scan it, and write a short report on what you found. The role leans as much on reporting as on finding.
• Practise a report layout that states the issue, its severity, the asset it touches and the suggested fix, since the post describes these elements.
• Learn the basics of Windows patching and hardening, because the role covers Windows virtual machines.
• Write a small script, in whichever of Python, PowerShell or Bash you know, that automates a check you repeat, and be ready to explain it.
• Prepare to explain what staying in scope and responsible disclosure mean, with an example from a CTF or lab.