Product Security Engineer Intern (Next Level Internship)

• A University student studying in Indonesia, OR;

• An alumnus max. 1 year after graduation

Send in your application now and start your journey to:

• Experience working at Indonesia's no. 1 SaaS company

• Get a min. 3-month period internship experience with your preferred team and role

By applying through this opening, you are applying specifically for the role of

We are looking for a motivated Security Engineering Intern to join our Product Security team for a 3-month internship. This is a hands-on opportunity to gain practical experience in vulnerability assessment and penetration testing (VAPT), working alongside experienced security professionals to help secure Mekari 's suite of SaaS products.

• Assist in performing vulnerability assessments and penetration tests across web applications, APIs, and mobile applications.

• Support manual and automated testing for common vulnerability classes (e.g., OWASP Top 10, business logic flaws, authentication/authorization issues).

• Help triage, validate, and document findings with clear reproduction steps, risk ratings, and remediation recommendations.

• Assist in tracking remediation of identified vulnerabilities with engineering teams through to closure.

• Support secure code review activities and threat modeling sessions for new features and products.

• Help maintain and tune vulnerability scanning tools and internal testing tooling.

• Contribute to building and improving internal VAPT playbooks, checklists, and testing methodologies.

• Explore AI tools and technologies (including AI agents/MCP) to identify opportunities for enhancing security testing workflows and reporting.

• Design and build automation to streamline repetitive security testing tasks.

• Currently pursuing or recently completed a degree in Cybersecurity, Information Technology, Computer Science, or a related field.

• Basic understanding of web/application security concepts (e.g., OWASP Top 10, common vulnerability types) is a plus.

• Familiarity with VAPT tools such as Burp Suite, OWASP ZAP, Nmap, or similar is a plus.

• Basic scripting ability (Python, Bash, or similar) for automation is a plus.

• Basic knowledge of AI agents and MCP (Model Context Protocol) is a plus.

• Strong analytical and problem-solving skills.

• Good communication skills and ability to explain technical findings clearly, both written and verbal.

• Eagerness to learn and adapt in a fast-paced security environment

Still got any questions? Shoot us a DM on Instagram at @lifeatmekari Good luck and we hope you make it to the Next Level of your journey with Mekari !