Security Engineering Intern, Red Team

Are you ready to be the first line of offense for one of the fastest-growing companies in the Cryptocurrency and Blockchain space? We're looking for a Security Engineering Intern (Red Team Sector) to think like an adversary, break things before attackers do, and help us build a platform our users can trust with their assets.
In crypto, every vulnerability has an immediate, irreversible dollar value attached. That's the bar you'll be operating at.

What you'll be doing:

• Offensive security engagements across our web, mobile, API, and microservice surfaces, as well as cloud infrastructure and internal systems.

• Perform application security assessments and penetration tests, with a focus on the attack paths that matter most in a crypto/fintech context: authentication and session handling, wallet and key management flows, transaction integrity, withdrawal and KYC bypasses, business logic abuse, and privilege escalation.

• Conduct manual secure code review on production codebases to find vulnerabilities that scanners miss, with particular attention to financial logic, race conditions, and trust-boundary violations.

• Research emerging threats in Web3, mobile, and cloud — new exploitation techniques, smart contract attack patterns, DeFi exploits, supply chain attacks — and translate them into proactive testing methodologies before they hit production.

• Write robust scripts, automate offensive workflows, and create frameworks that scale red team coverage across a fast-moving codebase.

What we're looking for:

• Knowledges in offensive security, penetration testing, or red teaming, with demonstrated hands-on experience in web and mobile application security, through CTF competition or bug bounty engagement.

• Final year at university with degree focusing on Computer Science, Information Systems, Engineering.

• Strong fundamentals in offensive security, application security, and security engineering.

• Strong familiarity with Linux and cloud ecosystems, especially AWS.

• Proficiency with industry-standard tooling: Burp Suite, intercepting proxies, fuzzers, and the broader pentester's toolkit.

• Working knowledge of OWASP (Top 10, ASVS, MASVS), CWE, and modern appsec frameworks.

• A builder's mindset; comfortable scripting and automating in Python, Go, or similar to scale your own work.

• Outstanding written and verbal communication in English, the ability to distill technical nuance into narratives that drive engineering and business change.

• A collaborative spirit, eager to work alongside engineers, researchers, and product teams to embed security into every phase of development.

• Advanced understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain preferred

What’s in it for you:

• Hands-on experience across multiple cybersecurity domains

• Mentorship from experienced security professionals

• Exposure to enterprise-grade security tools and technologies

• Opportunity to participate in real security operations and projects

• Potential pathway to full-time employment based on performance

• Flexible schedule to accommodate academic commitments

Duration 3-6 months, with possibility of extension based on performance and mutual agreement.

Find out more about Coinhako here https://www.coinhako.com/ and don't forget to visit our Careers Page https://www.coinhako.com/join-us

By submitting your application to us, you consent to the collection, use, disclosure and processing of your personal data in accordance with our privacy policy, which is accessible at https://www.coinhako.com/legal/sg-1/privacy_policy.