Summer Internship 2026 - Vulnerability Management Analyst

Description du poste:

Role Description
Working as team member of Cyber Risk Assurance (CRA) team, under the IT Risk & Security team, the Intern will be responsible for

1. Support Vulnerability Management program
* Supporting and assisting in delivering key security testing programs, including vulnerability assessment and penetration testing activities.
* Assist with conducting Adhoc, weekly and monthly vulnerability scans.
* Support with scan results preparation for vulnerabilities.
* Validate fixes and follow up with teams for remediation to ensure timely closure and meeting SLA timelines.
* Assist in preparing security metrics and reporting statistics for management reporting.
* Support coordination and follow up with internal application teams for pentest report findings to ensure timely remediation and fixes.

2. Assist in Process enhancement initiatives
* Collaborate with cross-functional teams to improve and streamline work flow processes.
* Automation tools to streamline vulnerability management workflows
* Improve tool vulnerability assessment monthly statistics reporting tool

It would be advantageous if the Intern possess good knowledge of OWASP top 10 for web and mobile, web/network/cloud security, vulnerability assessment and penetration testing. Having knowledge of AI LLM security, python programming will be added advantage.

Requirements
* Currently pursuing a diploma or degree in Cybersecurity, Information Technology, Computer Science, or related field.
* Knowledge of vulnerability assessment, penetration testing, and security testing methodologies.
* Knowledge of Tenable Nessus is a plus.
* Familiarity with web application and network security concepts.
* Understanding of OWASP top 10 for web and mobile.
* Having Cloud security knowledge and AI LLM knowledge is a plus.
* Strong interpersonal and presentation skills; able to work both independently and as part of a team.
* Detail-oriented with good analytical and problem-solving abilities.
* Passion for cybersecurity and willingness to learn