Back to all roles

Engineering

/

Learn at the frontier

Engineering Intern — Security

Security Internship

Intern Internship Remote / Guwahati 3 months

Engagement

Internship

Full-time and on-site at our campus. Structured, hands-on mentorship. Remote only in rare, pre-approved cases.

Scope of role

Contribute to live projects. Shadow senior practitioners. Build a portfolio that matters.

Please note this is an unpaid internship — the offer is real work, mentorship and experience at the frontier, not a stipend.

01 — The role

Why this role exists at EduRankAI

3 months under the Principal Security Engineer. Real responsible-disclosure work, security code review, threat modelling on live features. You will be expected to write code to fix what you find, not just describe it in a ticket.

02 — The work

What you will own

  • 01 Author threat models for live features.
  • 02 Run security code review on at least 10 PRs over the internship.
  • 03 Help with bug bounty triage.
  • 04 Author a security write-up at the end of the internship.
  • 05 Pair daily with the Principal Security Engineer.

03 — The expertise

What we look for

OWASP Top 10 familiarityOne responsible-disclosure win or CTF track recordPython or Go scriptingStrong written communicationComfort with hard conversations

04 — The bar

Who thrives here

  • You have completed at least one responsible-disclosure cycle, or placed in at least one CTF, with proof.
  • You can read application code in at least one language and find a real bug.
  • You write clearly about security including the tradeoffs.
  • You can describe a security control you would kill because it is theatre, and what you would replace it with.

05 — Hiring process

What to expect after you apply

  1. 01

    Application review

    Every application is read personally within five business days. We respond either way.

  2. 02

    Take-home or live exercise

    Role-specific. Time-boxed. Real problems we are actually working on, not invented puzzles.

  3. 03

    Conversations

    Deep technical and values conversations with the team you would join. No trick questions. No panel ambushes.

  4. 04

    Offer or honest no

    If yes: digital offer letter, signed in-portal, transparent terms. If no: written feedback if you want it.

Before you start

What we will collect. What it costs. What we will not do with it.

We will collect

  • Name, email, phone — Account + application updates. No marketing.
  • Resume / portfolio link — Human review of your work.
  • Date + place of birth — Identity verification only.
  • Your written responses — Selection rubric. Read by humans.
  • Government ID (later) — Anti-fraud at offer / interview stage. Not at signup.

We will never

  • Sell your data
  • Share with third-party recruiters
  • Use for advertising
  • Train models on it
  • Send marketing email

Our situation

EduRankAI is a small, independent organization building long-term capabilities in educational intelligence, advanced AI systems, and research infrastructure. We take no advertiser money, no donations with strings attached, and no investor pressure on hiring decisions. Applying is free, and every application is read by a human — recruitment, technical, academic and leadership teams. It buys us the right to be honest.

Full transparency policy Questions? Email us

Ready to apply?

We read every application personally. If you are the right person for this role — regardless of pedigree, background, or where you are based — you will hear back from us within five business days.

Intern Internship

Engineering Intern — Security

Apply →