Strikeforce Internship

DXC Strikeforce carries out penetration tests, red team operations and other offensive security assessments for DXC's clients. The team also builds its own internal tools. Less time spent on preparation and administration means more time for the assessments themselves.

You join the team's internal engineering work and help automate the supporting tasks around security assessments. You design and build automations that consultants start themselves from the team's internal platform. The automations hand their results back for review. The platform is a real product that the team uses every day, and a team member mentors you throughout the internship.

• →Work with the consultants to find out which recurring supporting tasks take the most time and which ones can be automated.
• →Design and develop new modules for the team's internal web platform for assessment management and reporting.
• →Automate the creation, configuration and removal of short-lived test environments in the team's lab.
• →Build security testing tools into automated, repeatable workflows, and collect and structure their output.
• →Build features that help consultants review and prioritise results, including AI-assisted analysis.
• →Develop securely: access control, safe handling of secrets and confidential data, logging and automated tests.
• →Measure the results of your work, such as the time it saves and the quality of its output.
• →Document your designs and your work, and present them to the team.
• →Work in short iterations with regular demos and code reviews, and report on your progress.

• →How a professional offensive security team prepares and runs its assessments.
• →How to develop and automate on an internal platform that is used in production, with your code reviewed by experienced engineers.
• →How to use AI responsibly in a security context.
• →How to work with confidential data under clear rules of engagement.

• You are a final-year student in applied computer science, cybersecurity, software engineering or a related field.
• You have programming experience and are comfortable reading, writing and debugging code.
• You know your way around Linux and networking basics.
• You have used version control.
• You are strongly interested in offensive security and automation.
• You speak and write English well.

• Experience with automating infrastructure or deployments.
• Experience with web application development.
• Experience with virtualisation or cloud platforms.
• CTFs, security labs or personal security projects.
• Experience with AI or large language models in your own projects.
• Knowledge of Dutch & English.

• You work independently and in a structured way, and you ask for help when you need it.
• You are curious and like to dig into how things work.
• You document your work so others can continue it.
• You are discreet and act ethically. You handle confidential information with care.