Cybersecurity undergraduate here
Hey everyone,
I’m currently a Cybersecurity undergraduate completing an enterprise Tech Risk internship. As my current contract winds down, I'm preparing to transition into my next role—either a second internship or a junior position in a core technical area like VAPT, SOC, Network Security, information security, cybersecurity engineer or general cybersecurity role .
My Background & Technical Profile:
Experience: Hands-on work with ISO 27001 risk assessments, vulnerability reviews, and security awareness.
Technical Skills: Network Security, Web & Network VAPT,Security Frameworks, Reverse Engineering, Wireshark, Linux (Ubuntu/Kali), Bash, C/C++, SQL.
Projects & Certs: Fortinet Certified Fundamentals, Cisco Networking Basics, Web App VAPT (Bug Bounty scope), Full-Scope Internal VAPT Virtual Lab, MSME Risk Assessment, Secure Network Architecture & Hardening.
A few questions for the community:
Transitioning to Junior Roles: Given that I already have a brief enterprise internship experience, is it realistic to jump straight into Junior/Associate Analyst roles in Sri Lanka, or are second internships standard?
Local Market Outlook: Which sectors in SL (tech firms, banks, telcos, or MSSPs) are currently actively hiring for intern/ junior/entry-level security teams? Any suggestions?
Further improvements: any suggestions on certificates and technical skills that I should gain to advance my career?
Any advice, company recommendations, or insights would be greatly appreciated!
Thanks in advance!