Cybersecurity Student Assistant

Are you interested in understanding how systems work, investigating security findings and helping colleagues address the underlying issues?  As a Cybersecurity Student Assistant, you will help strengthen the security of the systems and applications that support Heimstaden’s business. Your work will range from investigating vulnerabilities and reviewing security configurations to helping technical teams and business owners understand the risks and agree on what needs to be done.  You will work closely with our CISO, Senior Information Security Officer and colleagues across IT operations and development. This is a practical technical role, with opportunities to work with and get experience with Azure, Google Cloud, GitHub, Azure DevOps and security tools.  You will take ownership of clearly scoped tasks, with guidance from experienced colleagues and increasing responsibility as your skills develop. Technical changes will be planned and carried out together with the teams responsible for the systems.  Key responsibilities  Your tasks will include:  Investigating vulnerabilities. Review vulnerability findings for servers and applications, help assess the associated risks and support the security team in prioritising remediation efforts.  Improving security configurations. Help IT operations and development teams review and improve security settings in Azure, Google Cloud, GitHub and Azure DevOps, including access permissions and repository and pipeline settings.  Supporting patching and remediation. Help test and implement agreed fixes with the responsible teams, follow up on outstanding actions and verify whether vulnerabilities have been addressed.  Communicating security risks. Explain findings to technical colleagues and business owners so they understand what is affected, why it matters and what action is needed.  Depending on your interests, skills and experience, you may also help improve security processes and reporting, suggest better ways of working and develop scripts or automation that reduce repetitive work.  We are looking for someone who is technically sharp and enjoys investigating technical problems and wants to understand not just what a security tool reports, but what the finding means, the risk it represents, and how it can be addressed.  You are studying cybersecurity, computer science, software engineering or another relevant IT subject, preferably towards the end of your Bachelor’s degree or at the beginning of your Master’s degree. Whatever your field of study, you have a genuine interest in cybersecurity and a clear ambition to develop strong technical expertise in this area.  We want to see how you have put that interest into practice, whether through university projects, a home lab, personal projects or a previous student job. What have you built, investigated or tried to secure, and what did you learn from it? Previous work experience in…