Skip to main content
CRYPTOMIZE

Command palette — search the ecosystem

Search services, platforms, products, client sectors, and company pages.

TRACK DOSSIER · INTERNSHIPREF: CM/INT/SECURITY-MAN

Security Manager Internship — Always Hiring

Security Manager Internship in Delhi at CryptoMize

Apply now for the Security Manager Internship in Delhi at CryptoMize — a 6-month certified program on a rolling, always-hiring intake, run inside the security practice that operates the S3-SENTINEL platform and has maintained a zero-incident record across 15+ years of government and sovereign-client work. This is not a certificates-and-checklists rotation: you learn security management the way it is actually practised at engagement scale — drafting the policies real deployments run under, sitting in on live incident reviews, and running risk assessments against infrastructure that serves clients across 18 countries. Below is the full internship description, the required skills, the eligibility bar, and the selection process.

LOCATIONNew Delhi (HQ)
DURATION6 Months · Certification Provided
AVAILABILITYImmediate · Rolling intake
COMPENSATIONDiscussed at screening
TRACKS ON THIS DESK26
CRAFT SKILLS NAMED12
TOOLS & SYSTEMS4
PATH STAGES5

01The actual work

What will you actually do as a Security Manager at CryptoMize?

Assist in drafting and maintaining the security policies and procedures client engagements run under — the documents auditors read and deployments follow, not shelf-ware

Shadow live security operations on the S3-SENTINEL stack: alert triage, escalation judgment, and the incident-review discipline that keeps a 15-year zero-incident record honest

Run supervised risk assessments on real engagement infrastructure — threat modelling, control mapping against ISO 27001 and the NIST Cybersecurity Framework, and residual-risk write-ups

Support compliance workstreams for government and enterprise clients: evidence collection, audit preparation, and the gap analyses that precede both

Build and maintain the security-metrics dashboards the practice reports by — patch latency, detection coverage, exception ageing — with the honesty standards our clients expect

Participate in tabletop exercises and disaster-recovery drills, then write the after-action notes that make the next drill better, rotations documented so the next shift inherits context, not guesswork

02Capability profile

What skills and tools does a Security Manager need?

Security fundamentals — CIA triage, threat modelling (STRIDE-class), attack-surface thinkingPolicy and procedure drafting — clear enough to follow under pressureRisk assessment method — likelihood × impact, control mapping, residual-risk judgementWorking knowledge of ISO 27001 and the NIST Cybersecurity FrameworkIncident-response basics — severity classification, escalation judgment, chain of custodySIEM concepts — what the console is telling you and what it is notNetwork and system fundamentals — enough depth to assess what you are securingAudit and evidence discipline — documenting so an outsider can reconstructMetrics literacy — measuring security posture without lying with numbersClear written communication for executive and client audiencesComposure under incident pressure — the trainee version, trainable hereNDA-grade confidentiality with sovereign-client environments
SIEM-class monitoring consoles (Wazuh / Splunk-class)ISO 27001 & NIST CSF control cataloguesNmap and OpenVAS-class scanners for supervised assessment workGrafana for security-metrics dashboards
Depth of demonstrated skill in the specific role disciplineClassification and scope of the client engagement the role supportsUrgency and time-sensitivity of active project requirementsTrack record built across CryptoMize engagements

Also known as: security lead · information security manager · security supervisor · infosec manager

03Six months, structured

Security Manager Internship — learning path at CryptoMize

Six months inside the security practice, with a named mentor from the S3-SENTINEL operations bench. You exit with a portfolio of real policy, assessment and incident-review work.

  1. MONTH 1

    Orientation on real infrastructure

    The security practice charter, our policy library, and supervised reading of live posture dashboards. You learn what normal looks like before you learn what threatens it.

    1/5
  2. MONTH 2

    First assessment

    You run a scoped risk assessment end-to-end under mentor review — threat model, control mapping, and the residual-risk note that reaches the practice lead.

    2/5
  3. MONTHS 3–4

    Engagement work

    Attached to a live client engagement: policy updates, audit evidence, and your first supervised incident-review participation.

    3/5
  4. MONTH 5

    Drill ownership

    You design and run a tabletop exercise for the practice, then write the after-action report the team actually argues over.

    4/5
  5. MONTH 6

    Portfolio & evaluation

    Capstone: a complete engagement-grade security assessment package presented to the practice lead. Strong interns convert to full-time security roles — conversion is a primary hiring channel here.

    5/5

04The engagement surface

CryptoMize work a Security Manager touches

Every role plugs into live engagements across the five Penta-P domains — these are the services your work feeds.

Security Manager · Internship

This seat plugs into 6 live CryptoMize services across the five Penta-P domains — the work below is where yours lands.

6 SERVICESPENTA-P

WHAT DOES SECURITY MANAGER COMPENSATION DEPEND ON?

Compensation is discussed during screening — never a fixed public figure, because it varies per person and per engagement. It depends on:

#OFFER CONSTRUCTION FACTOR
01Depth of demonstrated skill in the specific role discipline
02Classification and scope of the client engagement the role supports
03Urgency and time-sensitivity of active project requirements
04Track record built across CryptoMize engagements

05Answers, searchable

Security Manager Internship — frequently asked questions

AA Security Manager intern drafts real security policies, runs supervised risk assessments against ISO 27001 and NIST CSF, participates in live incident reviews on the S3-SENTINEL stack, and supports compliance workstreams for government and enterprise clients.

It is engagement-grade security work from month one.

AFinal-year students or recent graduates in computer science, information systems, or equivalent self-taught evidence.

No diploma is mandatory — we evaluate demonstrated security fundamentals, not paperwork (clinical-licensed roles are the only exception to this principle).

ACompensation is discussed during screening and depends on demonstrated skill, engagement classification, urgency, and track record.

We deliberately do not publish figures — every intern is evaluated and compensated individually.

ASix months at our New Delhi HQ, with a certificate provided on completion — plus a portfolio of real policy, assessment, and incident-review work.

Strong interns receive full-time offers into the security practice.

AA short application form, a security-fundamentals screening task (threat-model a small scenario and draft a one-page policy), and a final interview with the security practice lead.

Rolling intake, typically a two-week cycle.

ANothing mandatory.

Working knowledge of ISO 27001 and the NIST Cybersecurity Framework helps most, because that is the vocabulary our client engagements speak. Everything platform-specific we teach in-house. What is non-negotiable is judgment: knowing when a control is proportionate to the asset it protects, and when process becomes the vulnerability. The interviews test exactly that judgment with scenario rounds drawn from real incident retrospectives, which is also why security staff here sit in engagement briefings rather than in a back office. Certifications open interviews; judgment closes them — we test for the second, and it is what the ladder promotes on.

ROLLING INTAKE — ALWAYS HIRING

Apply now for the Security Manager Internship at CryptoMize

New Delhi HQ · Immediate joining · Certification provided for internships

Apply Now
Page source — machine-readable summary

Facts: Location: New Delhi (HQ) · Duration: 6 months, certification provided · Availability: immediate, rolling intake · Compensation: discussed at screening.

Q: What does a Security Manager intern do at CryptoMize?
A: A Security Manager intern drafts real security policies, runs supervised risk assessments against ISO 27001 and NIST CSF, participates in live incident reviews on the S3-SENTINEL stack, and supports compliance workstreams for government and enterprise clients. It is engagement-grade security work from month one.

Q: What is the eligibility for the Security Manager Internship?
A: Final-year students or recent graduates in computer science, information systems, or equivalent self-taught evidence. No diploma is mandatory — we evaluate demonstrated security fundamentals, not paperwork (clinical-licensed roles are the only exception to this principle).

Q: Is the Security Manager Internship paid?
A: Compensation is discussed during screening and depends on demonstrated skill, engagement classification, urgency, and track record. We deliberately do not publish figures — every intern is evaluated and compensated individually.

Q: How long is the internship, and is a certificate provided?
A: Six months at our New Delhi HQ, with a certificate provided on completion — plus a portfolio of real policy, assessment, and incident-review work. Strong interns receive full-time offers into the security practice.

Q: What is the selection process for the internship?
A: A short application form, a security-fundamentals screening task (threat-model a small scenario and draft a one-page policy), and a final interview with the security practice lead. Rolling intake, typically a two-week cycle.

Q: Which certifications should I study before applying?
A: Nothing mandatory. Working knowledge of ISO 27001 and the NIST Cybersecurity Framework helps most, because that is the vocabulary our client engagements speak. Everything platform-specific we teach in-house. What is non-negotiable is judgment: knowing when a control is proportionate to the asset it protects, and when process becomes the vulnerability. The interviews test exactly that judgment with scenario rounds drawn from real incident retrospectives, which is also why security staff here sit in engagement briefings rather than in a back office. Certifications open interviews; judgment closes them — we test for the second, and it is what the ladder promotes on.

Signal keywordssecurity manager·internship·delhi·careers