Surge Global is a digital consultancy that leverages marketing, data, and technology to help businesses grow. As Sri Lanka’s leading digital firm, we employ the best content, creative, design & engineering talent the country has to offer.

Embracing a culture of transparency and equality in the workplace, we’ve built an environment helping Sri Lanka’s best marketing and creative talent thrive. Our team looks at untangling multivariate problems with an open mind and the willingness to constantly test and learn.

With our headquarters in Colombo Sri Lanka, we help scale startups to Fortune 500 companies across the United States, United Kingdom, Australia, and Sri Lanka.

During this paid internship, you'll learn the basics of Cyber Security in a real-world setting, working together with industry experts and taking on live projects. This is a paid internship (USD 225/month) that lasts for six months.

By the end of the internship, we expect that you would have gathered the skills and attitude required to work alongside the marketers, analysts, and growth hackers here at Surge to take your career forward and join our ranks.

What you’ll be doing/learning:

• Performing VAPT and assisting efforts to counter security breaches, security alerts, incidents, and disaster management.
• Recommending security configuration standards for cloud services: AWS, AZURE, GCP.
• Writing reports and providing insights on the efficacy of the current security policies, incident responses, disaster recovery plans, and other security-related information.
• Act as an Incident Response team to identify, log and event collection and analysis, forensic investigation support, communication support, and evidence handling.
• Conducts security risk assessments, evaluates security services and technologies, and reviews and documents information security policies and procedures as well as provides monitoring and oversight for alerts in the Cloud environment.

General Requirements:

• Bachelor’s Degree in Computer Information Systems or Computer Science or equivalent
• Deep understanding of IT infrastructure, information security, and compliance controls.
• Knowledge on network vulnerability and web application scanning tools.
• Technical writing ability, articulate and present complex security concepts and solutions.