Offensive Security Intern

**About PoCForge** PoCForge is a cyber security company specialising in penetration testing and offensive security. We help organisations find and fix real, exploitable weaknesses before attackers do, and we back every finding with a clear proof of concept. Learn more at https://pocforge.com **About the Role** We're looking for a hungry, hands-on Offensive Security Intern to join our remote team. You'll work alongside experienced pentesters on real client engagements, learning how professional security assessments are scoped, executed and reported. This is a learning-heavy role: you'll break things (legally), write about it clearly, and grow fast. **What You'll Do** * Assist with web application, API, network and cloud penetration tests under senior guidance * Perform reconnaissance, enumeration and vulnerability discovery using manual techniques and tools * Validate findings and help build reproducible proofs of concept * Document vulnerabilities with clear impact, risk ratings and remediation steps * Help draft professional client reports and executive summaries * Research new attack techniques, CVEs and tooling, and share what you learn with the team * Contribute to internal tooling, scripts, labs and PoCForge's security content **What We're Looking For** * Solid understanding of networking fundamentals (TCP/IP, DNS, HTTP/S) and how web applications work * Familiarity with the OWASP Top 10 and common vulnerability classes (XSS, SQLi, SSRF, IDOR, auth flaws, etc.) * Hands-on experience with tools such as Burp Suite, Nmap, Metasploit, ffuf/gobuster or similar * Comfort working in Linux and the command line * Basic scripting ability in Python, Bash or similar * Strong curiosity, a hacker mindset and a strong sense of ethics * Clear written English; you can explain a technical issue simply **Nice to Have** * Active profile on Hack The Box, TryHackMe, PortSwigger Academy, or CTF experience * Bug bounty findings, CVEs, write-ups, a blog or a GitHub with security projects * Certifications or ongoing study such as eJPT, CEH, PNPT, OSCP or similar * Exposure to Active Directory, cloud (AWS/Azure/GCP) or mobile app testing **What You'll Get** * Real-world experience on live client engagements, not just labs * Mentorship from working offensive security professionals * Fully remote work with a flexible, outcome-focused culture * Internship certificate and a letter of recommendation based on performance * A potential path to a full-time role at PoCForge **How to Apply** Apply through LinkedIn with your resume. Bonus points for including links to your HTB/THM profile, CTF write-ups, bug bounty reports or GitHub. We value proof of skill over paper credentials. PoCForge is an equal opportunity employer. We welcome applicants of all backgrounds.