Offensive Security Intern

About PoCForge

PoCForge is a cyber security company specialising in penetration testing and offensive security. We help organisations find and fix real, exploitable weaknesses before attackers do, and we back every finding with a clear proof of concept. Learn more at https://pocforge.com

About the Role

We're looking for a hungry, hands-on Offensive Security Intern to join our remote team. You'll work alongside experienced pentesters on real client engagements, learning how professional security assessments are scoped, executed and reported. This is a learning-heavy role: you'll break things (legally), write about it clearly, and grow fast.

What You'll Do

• Assist with web application, API, network and cloud penetration tests under senior guidance
• Perform reconnaissance, enumeration and vulnerability discovery using manual techniques and tools
• Validate findings and help build reproducible proofs of concept
• Document vulnerabilities with clear impact, risk ratings and remediation steps
• Help draft professional client reports and executive summaries
• Research new attack techniques, CVEs and tooling, and share what you learn with the team
• Contribute to internal tooling, scripts, labs and PoCForge's security content

What We're Looking For

• Solid understanding of networking fundamentals (TCP/IP, DNS, HTTP/S) and how web applications work
• Familiarity with the OWASP Top 10 and common vulnerability classes (XSS, SQLi, SSRF, IDOR, auth flaws, etc.)
• Hands-on experience with tools such as Burp Suite, Nmap, Metasploit, ffuf/gobuster or similar
• Comfort working in Linux and the command line
• Basic scripting ability in Python, Bash or similar
• Strong curiosity, a hacker mindset and a strong sense of ethics
• Clear written English; you can explain a technical issue simply

Nice to Have

• Active profile on Hack The Box, TryHackMe, PortSwigger Academy, or CTF experience
• Bug bounty findings, CVEs, write-ups, a blog or a GitHub with security projects
• Certifications or ongoing study such as eJPT, CEH, PNPT, OSCP or similar
• Exposure to Active Directory, cloud (AWS/Azure/GCP) or mobile app testing

What You'll Get

• Real-world experience on live client engagements, not just labs
• Mentorship from working offensive security professionals
• Fully remote work with a flexible, outcome-focused culture
• Internship certificate and a letter of recommendation based on performance
• A potential path to a full-time role at PoCForge

How to Apply

Apply through LinkedIn with your resume. Bonus points for including links to your HTB/THM profile, CTF write-ups, bug bounty reports or GitHub. We value proof of skill over paper credentials.

PoCForge is an equal opportunity employer. We welcome applicants of all backgrounds.