We're hiring
Security Engineering Intern
Ship code in your first week. Learn security by doing it on real engagements.
About VRG
VRG builds web applications, automates business tasks and carries out security assessments using AI tools. Our clients include law firms, enterprise SaaS businesses, professional services and event companies in Asia and elsewhere.
The Internship
This paid internship is open to current students and recent graduates in Computer Science, Mathematics, Physics or other hard sciences. We assess your problem-solving and coding skills; previous professional experience is not required.
Every engineer uses AI coding tools daily, including Claude Code, Cursor and Copilot. You will learn to use them in your work. Experience experimenting with LLMs or building side projects with AI will help, as will an interest in understanding how they work.
What You'll Work On
You'll rotate across real client work and internal projects, paired with a senior engineer. Expect a mix of security-focused tasks and full stack development:
- ▸Assist with web application security assessments: learning to identify vulnerabilities like XSS, IDOR, SSRF, auth bypass, and API misconfigurations
- ▸Write and review code across the stack (React, TypeScript, Node.js, Python): we'll meet you where you are
- ▸Help build and improve internal AI tools for security audits
- ▸Learn to use professional security tooling: Burp Suite, OWASP ZAP, Semgrep
- ▸Write up findings in clear, structured reports that clients can act on
- ▸Get hands-on with cloud infrastructure: AWS, Docker, CI/CD pipelines
You will ship code in your first week.
Who We're Looking For
Requirements
- ▸Currently pursuing or recently completed a degree in Computer Science, Mathematics, Physics, Engineering, or a related hard science
- ▸Comfortable writing code in at least one language (Python, JavaScript/TypeScript, or similar)
- ▸An interest in security and familiarity with OWASP. You should be able to explain why security matters; expertise is not required
- ▸Demonstrated interest in AI tools and workflows: show us a side project, a script, a repo, anything where you used AI to build something
- ▸Clear communicator who can explain technical concepts in writing
- ▸Able to work independently in an async, remote environment
Big Pluses
- ▸Thai language ability for client calls, documentation and work with Thai-language systems. Several of our clients operate in Thailand
- ▸Experience with CTF competitions, bug bounty platforms, or personal security research
- ▸Contributions to open-source projects or a visible portfolio of side projects
We welcome candidates from non-traditional backgrounds. If you studied physics but taught yourself to code, or you're a maths major who got obsessed with CTF competitions, we want to hear from you. Security work needs people who enjoy investigating problems and can reason through them carefully.
What We Offer
Paid internship
The internship is paid, with compensation competitive for the region.
Real project work from day one
Work on client engagements with direct mentorship from senior engineers.
Learn from security assessments
Learn how we carry out security audits and use AI tools during assessments.
Path to full-time
Strong performers will be offered a permanent role. We hire from our internship pipeline first.
Interview Process
The interview has two stages:
- 1
Intro call(30 min)
Tell us what you're interested in. Walk us through something you've built.
- 2
Short technical task(async)
A small, realistic exercise. Use whatever tools you want, including AI.
- 3
Offer
We move fast when we find the right person.
How to Apply
Send an email to careers@vrg.asia with the subject line “Security Intern: [Your Name]” and include:
- ▸Your CV or LinkedIn profile
- ▸A short note (a few sentences is fine) about what interests you about security and/or AI
- ▸A link to anything you've built: GitHub, a side project, a write-up, a CTF profile, whatever shows how you think
No cover letter needed. We respond to every applicant.
VRG is an equal opportunity employer. We assess candidates through their engineering skills and work samples.