Cybersecurity Internship: Pentest & GRC/ISO 27001

Are you passionate about ethical hacking and eager to develop the skills that keep modern applications safe - and just as interested in the process side of security, helping organisations build and prove real information security governance? If so, we have the perfect opportunity for you!

ABOUT THE INTERNSHIP
Our Cybersecurity Internship combines hands-on offensive security with practical compliance work. You'll start on a live Application Security & Penetration Testing engagement, then move onto an ISO 27001 compliance project, supporting our team as clients work toward certification. This internship is for ambitious individuals who want real client exposure on both the technical and process sides of security.

WHAT YOU'LL LEARN
As an intern, you will:

• Test modern web applications, APIs and mobile apps for real security weaknesses.
• Learn how professional penetration tests are planned, executed and reported.
• Turn technical findings into clear, practical advice that clients can act on.
• Support ISO 27001 compliance work: gap analyses, ISMS documentation, risk registers, and audit preparation.
• Gain hands-on experience with the tools and methodologies used on live engagements, across both offensive testing and compliance.

Every vulnerability you help find, and every control you help document, makes a real system, and a real organisation, safer.

WHY JOIN US?

• Hands-on experience across both offensive security and compliance/GRC work.
• Guidance and mentorship from experienced consultants on both sides of the practice.
• Opportunity to work on real-world client engagements that make an impact.
• A collaborative and supportive environment where questions are always welcome.

WHO WE'RE LOOKING FOR
We welcome interns who:

• Have a strong interest in cybersecurity, spanning both ethical hacking and security compliance.
• Have a solid grasp of web technologies, networking, and Linux or Windows OS. You don't need to be an expert, but we expect you to be comfortable working in these environments.
• Good knowledge of mobile app development (iOS/Android) and APIs.
• Good knowledge of any major cloud technologies/platforms (AWS/Azure/GCP).
• Have some awareness of common application vulnerabilities, such as the OWASP Top 10.
• Exposure to web application penetration testing, API security testing, or mobile application security through academic projects or self-learning.
• Have some understanding of, or genuine interest in, security compliance frameworks such as ISO 27001, GDPR, or NIST, you'll be expected to actively contribute to compliance work, not just observe it.
• Have tried their hand at CTFs or practice labs such as Hack The Box, TryHackMe or PortSwigger Web Security Academy, or personal projects or home labs.
• Good programming/scripting experience, for example, Python or Bash, is a bonus.
• Are proactive and self-driven- comfortable identifying what needs doing and taking initiative, rather than waiting to be told.
• Strong analytical and problem-solving skills with the ability to think creatively, eager to learn and solve complex problems.
• Are ready to contribute ideas and collaborate with a dynamic team.

Approach security work with care, discretion and a strong ethical mindset.

LOCATION
This is a fully onsite role based at our offices in Lindholmen, Gothenburg- no remote work option. You must already be based in Gothenburg or able to relocate before the start date.

HOW TO APPLY
Send your resume and a cover letter explaining why you're excited about both penetration testing and compliance work, and why you are an ideal candidate for the role.
It is recommended to include any personal security projects, CTF write-ups, lab platform profiles, or compliance-related coursework/projects you have worked on.
Don't miss this chance to kickstart your career across both sides of cybersecurity!
Join us, and let's build a safer digital world together!

Please note: This is an unpaid, full-time, 6-month onsite internship starting September/October 2026 at our offices in Lindholmen, Gothenburg.

Department Cyber Security Locations Consultants Göteborg