# Security Manager Internship at CryptoMize Apply now for the Security Manager Internship in Delhi at CryptoMize — a 6-month certified program on a rolling, always-hiring intake, run inside the security practice that operates the S3-SENTINEL platform and has maintained a zero-incident record across 15+ years of government and sovereign-client work. This is not a certificates-and-checklists rotation: you learn security management the way it is actually practised at engagement scale — drafting the policies real deployments run under, sitting in on live incident reviews, and running risk assessments against infrastructure that serves clients across 18 countries. Below is the full internship description, the required skills, the eligibility bar, and the selection process. ## Facts - Location: New Delhi (HQ), CDR Building, Chhatarpur - Type: 6-month internship, certification provided - Availability: immediate, rolling intake (always hiring) - Compensation: discussed at screening ## What you will actually do - Assist in drafting and maintaining the security policies and procedures client engagements run under — the documents auditors read and deployments follow, not shelf-ware - Shadow live security operations on the S3-SENTINEL stack: alert triage, escalation judgment, and the incident-review discipline that keeps a 15-year zero-incident record honest - Run supervised risk assessments on real engagement infrastructure — threat modelling, control mapping against ISO 27001 and the NIST Cybersecurity Framework, and residual-risk write-ups - Support compliance workstreams for government and enterprise clients: evidence collection, audit preparation, and the gap analyses that precede both - Build and maintain the security-metrics dashboards the practice reports by — patch latency, detection coverage, exception ageing — with the honesty standards our clients expect - Participate in tabletop exercises and disaster-recovery drills, then write the after-action notes that make the next drill better, rotations documented so the next shift inherits context, not guesswork ## Skills - Security fundamentals — CIA triage, threat modelling (STRIDE-class), attack-surface thinking - Policy and procedure drafting — clear enough to follow under pressure - Risk assessment method — likelihood × impact, control mapping, residual-risk judgement - Working knowledge of ISO 27001 and the NIST Cybersecurity Framework - Incident-response basics — severity classification, escalation judgment, chain of custody - SIEM concepts — what the console is telling you and what it is not - Network and system fundamentals — enough depth to assess what you are securing - Audit and evidence discipline — documenting so an outsider can reconstruct - Metrics literacy — measuring security posture without lying with numbers - Clear written communication for executive and client audiences - Composure under incident pressure — the trainee version, trainable here - NDA-grade confidentiality with sovereign-client environments ## Tools - SIEM-class monitoring consoles (Wazuh / Splunk-class) - ISO 27001 & NIST CSF control catalogues - Nmap and OpenVAS-class scanners for supervised assessment work - Grafana for security-metrics dashboards ## Questions and answers ### What does a Security Manager intern do at CryptoMize? A Security Manager intern drafts real security policies, runs supervised risk assessments against ISO 27001 and NIST CSF, participates in live incident reviews on the S3-SENTINEL stack, and supports compliance workstreams for government and enterprise clients. It is engagement-grade security work from month one. ### What is the eligibility for the Security Manager Internship? Final-year students or recent graduates in computer science, information systems, or equivalent self-taught evidence. No diploma is mandatory — we evaluate demonstrated security fundamentals, not paperwork (clinical-licensed roles are the only exception to this principle). ### Is the Security Manager Internship paid? Compensation is discussed during screening and depends on demonstrated skill, engagement classification, urgency, and track record. We deliberately do not publish figures — every intern is evaluated and compensated individually. ### How long is the internship, and is a certificate provided? Six months at our New Delhi HQ, with a certificate provided on completion — plus a portfolio of real policy, assessment, and incident-review work. Strong interns receive full-time offers into the security practice. ### What is the selection process for the internship? A short application form, a security-fundamentals screening task (threat-model a small scenario and draft a one-page policy), and a final interview with the security practice lead. Rolling intake, typically a two-week cycle. ### Which certifications should I study before applying? Nothing mandatory. Working knowledge of ISO 27001 and the NIST Cybersecurity Framework helps most, because that is the vocabulary our client engagements speak. Everything platform-specific we teach in-house. What is non-negotiable is judgment: knowing when a control is proportionate to the asset it protects, and when process becomes the vulnerability. The interviews test exactly that judgment with scenario rounds drawn from real incident retrospectives, which is also why security staff here sit in engagement briefings rather than in a back office. Certifications open interviews; judgment closes them — we test for the second, and it is what the ladder promotes on. Apply: https://cryptomize.com/careers/internship/apply/