Cybersecurity Internship / Thesis Internship – AI & Cloud Security

Amsterdam | Regular internship or thesis internship | Flexible start date

AI systems increasingly interact with company data, APIs, cloud environments and external tools. AI agents can go even further by taking actions across connected systems.

This creates new possibilities, but also introduces new security challenges.

CribConnects AI is looking for a Cybersecurity Intern / Thesis Intern to help us investigate and improve the security of both our internal environment and the AI solutions we develop for clients.

Depending on your background and interests, your internship can focus on technical cybersecurity, AI & agent security, security governance & risk, or a combination of these areas.

About CribConnects AI

CribConnects AI is an Amsterdam-based AI company that advises, trains and builds.

Our work ranges from AI strategy and governance to adoption, data, automation, AI agents and custom software.

Cybersecurity therefore does not exist as an isolated topic within our work. You will investigate security in the context of real software, AI applications and organisational environments.

You will work alongside our consultants and engineers and will be encouraged not only to identify risks, but also to investigate practical ways to mitigate them.

Possible areas of focus

The exact internship assignment will be defined together based on your interests, academic requirements and experience.

Technical Security

Possible topics include:

• Web, API and cloud security;
• Authentication, authorisation and identity & access management;
• Secrets and credentials management;
• Security of data flows and system integrations;
• Threat modelling;
• Dependency and configuration risks;
• Vulnerability assessments and controlled security testing within an explicitly authorised scope;
• Designing and implementing practical security improvements.

AI & Agent Security

You can investigate security challenges specific to generative and agentic AI systems, including:

• Direct and indirect prompt injection;
• Sensitive information exposure;
• Unintended access to data or systems;
• Excessive permissions and privileges;
• Tool and API misuse by AI agents;
• Security of RAG and agentic AI architectures;
• AI red teaming and security testing;
• Translating current frameworks such as OWASP GenAI Security guidance into practical assessments and controls.

Security Governance & Risk

If your interests are more focused on governance and risk, possible areas include:

• Cybersecurity risk assessments;
• Security policies and practical guidelines;
• Designing and evaluating security controls;
• ISO 27001-related topics;
• Relevant requirements under the Dutch Cybersecurity Act implementing NIS2;
• AI security and governance requirements under the EU AI Act where applicable;
• Developing reusable security assessment methodologies and checklists.

You do not need to specialise in all three areas. Together, we will select a focus that matches your background.

Regular or thesis internship

We are open to both a regular internship and a graduation, research or thesis internship.

For a regular internship, you can combine your own cybersecurity assignment with practical work within our projects.

For a thesis or research internship, we will define a clear research question together with you and your university. You will be given sufficient time for academic research, documentation and writing your thesis or internship report.

Potential research questions include:

How can AI agents be systematically evaluated for security vulnerabilities before deployment in enterprise environments?

How can permissions and access controls for AI agents be designed to reduce the impact of prompt injection and tool misuse?

How can technical and organisational security controls be combined when deploying generative AI within organisations?

If you already have a research topic in mind, we are happy to explore how it could fit within CribConnects AI.

Who are we looking for?

You are currently pursuing a Bachelor's or Master's degree in a relevant field, such as Cyber Security, Computer Science, Informatics, Technical Computer Science, Security and Network Engineering, Computer Security, Information Security, Artificial Intelligence or a closely related programme.

You do not need to be an expert in every area of cybersecurity.

We are mainly looking for someone who:

• Is curious about how systems work and how they can fail or be misused;
• Enjoys investigating complex technical or organisational problems;
• Has a strong interest in cybersecurity and emerging AI technology;
• Can work independently and take initiative;
• Can clearly document and communicate findings;
• Wants to translate research into practical improvements.

For technically focused internships, experience with topics such as Python, Linux, Git, APIs, cloud platforms, Docker, web security, networking or security tooling is useful, but not required.

An interest in governance, risk, privacy or compliance is equally relevant for a governance-focused internship.

Personal projects, CTF participation, GitHub repositories, responsible disclosure or previous security research are all welcome, but not required.

What we offer

• An internship at the intersection of cybersecurity, AI and cloud technology;
• The option of a regular or thesis/research internship;
• Your own substantive cybersecurity assignment;
• Dedicated supervision from CribConnects AI;
• Sufficient time for academic research and your internship report or thesis;
• The opportunity to work on internal systems as well as client-facing solutions, depending on the project;
• Collaboration with AI Engineers and Consultants;
• Freedom to explore current security techniques, frameworks and tooling;
• A workplace with our team in Amsterdam;
• An internship allowance of €500 per month based on a full-time internship.

Start date

Flexible

Duration

To be agreed based on your programme requirements

Internship type

Regular internship or thesis/research internship

Interested?

Send us your CV together with a short introduction explaining which area of cybersecurity interests you most.

A lengthy cover letter is not required. We are mainly interested in what you would like to learn and which type of cybersecurity challenge you would like to work on.

If you have personal projects, a GitHub profile, CTF experience or previous security research, feel free to share those as well.