Security Engineering Intern, Red Team

Are you ready to be the first line of offense for one of the fastest-growing companies in the Cryptocurrency and Blockchain space? We're looking for a Security Engineering Intern (Red Team Sector) to think like an adversary, break things before attackers do, and help us build a platform our users can trust with their assets. In crypto, every vulnerability has an immediate, irreversible dollar value attached. That's the bar you'll be operating at. What you'll be doing: Offensive security engagements across our web, mobile, API, and microservice surfaces, as well as cloud infrastructure and internal systems. Perform application security assessments and penetration tests, with a focus on the attack paths that matter most in a crypto/fintech context: authentication and session handling, wallet and key management flows, transaction integrity, withdrawal and KYC bypasses, business logic abuse, and privilege escalation. Conduct manual secure code review on production codebases to find vulnerabilities that scanners miss, with particular attention to financial logic, race conditions, and trust-boundary violations. Research emerging threats in Web3, mobile, and cloud — new exploitation techniques, smart contract attack patterns, DeFi exploits, supply chain attacks — and translate them into proactive testing methodologies before they hit production. Write robust scripts, automate offensive workflows, and create frameworks that scale red team coverage across a fast-moving codebase. What we're looking for: Knowledges in offensive security, penetration testing, or red teaming, with demonstrated hands-on experience in web and mobile application security, through CTF competition or bug bounty engagement. Final year at university with degree focusing on Computer Science, Information Systems, Engineering. Strong fundamentals in offensive security, application security, and security engineering. Strong familiarity with Linux and cloud ecosystems, especially AWS. Proficiency with industry-standard tooling: Burp Suite, intercepting proxies, fuzzers, and the broader pentester's toolkit. Working knowledge of OWASP (Top 10, ASVS, MASVS), CWE, and modern appsec frameworks. A builder's mindset; comfortable scripting and automating in Python, Go, or similar to scale your own work. Outstanding written and verbal communication in English , the ability to distill technical nuance into narratives that drive engineering and business change. A collaborative spirit, eager to work alongside engineers, researchers, and product teams to embed security into every phase of development. Advanced understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain preferred What’s in it for you: Hands-on experience across multiple cybersecurity domains Mentorship from experienced security professionals Exposure to enterprise-grade security tools and technologies Opportunity to participate in real security operations and projects Potential pathway to full-time employment based on performance Flexible schedule to accommodate academic commitments Duration 3-6 months , with possibility of extension based on performance and mutual agreement. Find out more about Coinhako here https://www.coinhako.com/ and don't forget to visit our Careers Page https://www.coinhako.com/join-us By submitting your application to us, you consent to the collection, use, disclosure and processing of your personal data in accordance with our privacy policy, which is accessible at https://www.coinhako.com/legal/sg-1/privacy_policy .