Cybersecurity Intern

Company Description

Launched in 2007 by Aloke Bajpai & Rajnish Kumar, ixigo (Le Travenues Technology Limited) is a technology company focused on empowering Indian travellers to plan, book and manage their trips across rail, air, buses and hotels. ixigo assists travellers in making smarter travel decisions by leveraging artificial intelligence. The ixigo, ConfirmTkt and AbhiBus apps allow travellers to book train tickets, flight tickets, bus tickets, hotels, and cabs, and provide travel utility tools and services developed using in-house proprietary algorithms and crowd-sourced information. With over 54 crore Annual Active Users in Fiscal 2025, ixigo is the leading OTA for Next Billion Users in India. For more information, please visit http://www.ixigo.com

Job Description

About the Role
We are looking for a passionate and motivated Cybersecurity Intern to join our Information Security team. The internship offers hands-on exposure to cybersecurity, privacy, governance, risk management, vulnerability management, and regulatory compliance.

Key Responsibilities
● Support Information Security Governance, Risk & Compliance (GRC) activities.
● Assist in vulnerability management, security assessments, and remediation tracking.
● Review CVEs, threat intelligence, and security advisories.
● Support compliance initiatives related to DPDP Act, PCI DSS, ISO 27001, and PIMS (ISO 27701).
● Prepare security policies, standards, procedures, and documentation.
● Participate in security awareness and phishing simulation activities.
● Support vendor security assessments and privacy reviews.
● Research emerging cyber threats, AI security, and regulatory updates.

Required Skills & Knowledge
● Basic understanding of the DPDP Act, 2023 and Rules
● PCI DSS fundamentals
● PIMS (ISO 27701) and ISO 27001 fundamentals
● NIST Cybersecurity Framework (CSF)
● OWASP Top 10
● MITRE ATT&CK Framework
● CVSS and CVE concepts
● Network security fundamentals and protocols (TCP/IP, HTTP/HTTPS, DNS, SSH, TLS)
● Authentication and Authorization concepts
● Basic cloud security concepts (AWS/Azure/GCP)
● Basic understanding of Vulnerability Assessment & Penetration Testing (VAPT)

Preferred Qualifications
● Pursuing or recently completed a Bachelor's/Master's degree in Cybersecurity, Information Security, Computer Science, or related field.
● Knowledge of Burp Suite, Wireshark, Nmap, Nessus, or similar tools is an advantage.
● Relevant certifications such as Security+, CEH, or ISO 27001 are a plus.

● Strong analytical and problem-solving skills
● Curiosity and willingness to learn
● Good communication skills
● Attention to detail
● Ability to work collaboratively

What You'll Gain
● Hands-on exposure to enterprise cybersecurity and privacy programs
● Experience with industry-standard security and privacy frameworks
● Mentorship from experienced cybersecurity professionals
● Exposure to governance, compliance, security operations, and privacy initiatives

Additional Information

Responsible for safeguarding sensitive company data against unauthorized access, use, or disclosure, and for reporting any suspected security incidents in line with the organization's ISMS (Information Security Management System) policies and procedures.