Offensive Security Research Intern

About Us

SC Audit Studio (SCAS) is an early-stage cybersecurity startup focused on offensive security.

We work on high-value targets across different industries, combining traditional hacking techniques with AI-powered tooling to uncover security vulnerabilities.

The Opportunity

We're looking for an offensive security research intern to join us full-time for three months and collaborate on real-world offensive security research.

Your work will include:

• Bug bounty hunting & pentesting, finding vulnerabilities in real-world targets through authorized public and private programs.
• CTFs, solving challenging security problems together.
• AI security research, prompt injection, LLM vulnerabilities, and AI-assisted exploitation.
• Tooling & research, developing offensive security tools and publishing technical writeups.

The focus will depend on your interests and strengths. You'll have freedom to explore your own research ideas while working closely with other security researchers.

Who We're Looking For

We're interested in candidates with demonstrated experience or strong interest in at least one of the following:

• Strong placements in international CTF competitions
• Paid bug bounty reports or notable vulnerability discoveries
• Solid understanding of cryptography
• Web application or infrastructure security skills
• Experience with prompt injection, AI security, or LLM exploitation

You don't need to check every box. If you have interesting projects, research, or demonstrated technical curiosity, we encourage you to apply.

We're more interested in your practical skills, curiosity, and willingness to learn than formal qualifications.

What We Offer

• Collaboration with other offensive security researchers on challenging targets
• Access to private bug bounty opportunities
• Freedom to pursue interesting technical research
• Hands-on learning, mentorship, and practical security research experience
• An office in Helsinki and a flexible hybrid working arrangement
• Paid internship with additional performance-based compensation for successful research contributions
• Potential transition into a full-time Founding Security Researcher role with salary and equity following a successful funding round

The Reality of an Early-Stage Startup

This is not a conventional, highly structured corporate internship. We're a small startup with limited resources, changing priorities, and occasionally chaotic day-to-day operations.

What we can offer is the opportunity to do meaningful research, learn alongside other hackers, and potentially become an early member of the founding team.

The future full-time role is dependent on funding and mutual fit, and is not guaranteed.

We're looking for someone who values technical growth, research freedom, and collaboration, and is excited about working in an early-stage startup environment.

Practical Details

• Location: Helsinki, hybrid
• Hours: Full-time, with regular in-person collaboration at our Helsinki office
• Duration: 3 months, fixed-term paid internship
• Compensation: Monthly base salary plus additional performance-based bonuses
• Start date: November

How to Apply

Send us a short introduction and evidence of what you've worked on, CTF results, bug bounty findings, GitHub projects, technical writeups, or anything else that demonstrates your skills.

We're more interested in what you can do than your formal qualifications. Students, recent graduates, and self-taught hackers are all encouraged to apply.