# Penetration Tester Internship at CryptoMize Apply now for the Penetration Tester Internship in Delhi at CryptoMize — a 6-month certified program on a rolling, always-hiring intake. Penetration tester interns learn offensive security the way it is actually practiced for clients: scoped, authorized, documented, and dangerous to everything except the contract. You will train across web and Android application testing and network pentesting on our in-house ranges, then work supervised on client engagements where the findings are real and so is the remediation. If you are a fresher who wants to break things professionally — with Burp in one hand and a written authorization in the other — this is the internship description, the required skills, the eligibility, and the selection process, in full. ## Facts - Location: New Delhi (HQ), CDR Building, Chhatarpur - Type: 6-month internship, certification provided - Availability: immediate, rolling intake (always hiring) - Compensation: discussed at screening ## What you will actually do - Learn engagement discipline first: draft the scope memo and rules-of-engagement sheet for supervised tests — what is authorized, when, and who calls a stop - Practice web testing against lab targets: map the surface, work the injection and access-control classes, and document each finding as if the client were watching - Handle evidence correctly from day one — capture, hash, timestamp, and store every proof artifact so a finding cannot be disputed on procedure - Take the client-communication shift on supervised engagements: the daily status note, the critical-finding alert, and the calm tone live systems demand - Build reports in the house format: reproduction steps, impact in business terms, and fixes a developer can apply without guessing - Perform the retest pass after remediation weeks — confirm each fix under supervision and write the closure note - Carry a capstone in the final months: one supervised engagement end-to-end, from scope memo to closure report, on a lab estate ## Skills - Scope-memo and rules-of-engagement drafting - Web testing practice on lab targets — injection and access-control classes - Evidence handling — capture, hash, timestamp, store - Client-status communication on live systems - House-format report building - Retest verification and closure notes - Toolchain fluency — instruments, not crutches - Note-keeping that reconstructs the test weeks later - Impact framing in business language - Restraint — demonstrating, never damaging - Scope obedience under supervision (absolute) - Clearance-track conduct from the first day ## Tools - Burp Suite (web application testing) - Nmap (network reconnaissance and enumeration) - Metasploit Framework (exploitation training) - Kali Linux toolchain - Wireshark (traffic analysis) - OWASP Top 10 / PTES methodology frameworks ## Questions and answers ### What does a Penetration Tester intern do at CryptoMize? A pen tester intern trains on web, Android, and network testing against in-house ranges mapped to OWASP Top 10 and PTES, then works supervised on client engagements — verified exploitation within scope, findings drafting, and remediation re-testing. ### What is the eligibility for the Penetration Tester Internship? Final-year students or recent graduates from any technical discipline with demonstrated fundamentals — networking, Linux, and scripting basics. Certifications like CEH are welcome signals but not required; we train the methodology in-house. ### Is the Penetration Tester Internship paid? Compensation is discussed during the screening process and depends on demonstrated skill, engagement classification, urgency, and track record. We deliberately do not publish figures. ### How long is the internship, and is a certificate provided? The program runs 6 months with a certificate on completion — plus a capstone assessment portfolio. Strong interns receive full-time Penetration Tester offers. ### What is the selection process for the internship? A short application, a hands-on range exercise (a guided web-application assessment), and an interview with the security practice lead. The cycle typically completes within two weeks. ### Which tools will I learn? Burp Suite, Nmap, Metasploit, the Kali Linux toolchain, and Wireshark — alongside the OWASP Top 10 and PTES methodologies that organize them. Tools are the entry ticket; the thinking is the job. ### Do I need certifications like CEH to join the internship? No. We assess fundamentals directly — networking, Linux, scripting, and how you think through a scoped range exercise. Certifications are welcome signals of seriousness, but the program exists precisely to train the methodology, the tooling, and the authorization discipline that certifications alone never confer. ### What happens after the Penetration Tester Internship ends? The program's purpose is conversion: capstone-passing interns receive full-time offers into the security practice's engagement pipeline. The exit alternative is a documented testing portfolio — range assessments, supervised engagement work, and report craft — that security teams elsewhere recognize immediately. Apply: https://cryptomize.com/careers/internship/apply/