COE Security Reviews

They'll advertise the job as a 12 month training + internship program in cyber security. According to the job description, there will be a first 6 months of unpaid training where we will receive comprehensive guidance and practical exposure to the core practices of penetration testing, application security, and information security, and upon successfully completing the training period and demonstrating your potential, you will transition to a paid internship. During this phase, you will work on real-world projects, such as conducting security assessments, performing vulnerability analyses, developing reports on security findings, and working with development teams to remediate identified vulnerabilities. Those above words were what led me to apply for this position expecting a real-world, corporate VAPT training. Once I got the email saying that I was selected, I was asked join an onboarding meeting session where the CEO, Ravi Yerra sir, would address all the selected intern trainees. Then, he dropped a extremely shocking and disappointing statement bombs: "We are not a training institute", "I will not teach you what is OWASP Top 10", and "You guys need to learn that yourselves and come to me only for direction when stuck". I was frustrated with the way I was drawn in with false VAPT training promises and then expected to contribute to the client projects as well as other work irrelevant to the job description with my fragmented knowledge. The client projects were nothing like I have worked on before in labs and tutorials. As an aspiring cybersecurity learner, I was hoping for proper, live mentorship in pentesting to help me get into offensive security with step by step guidance through all the hard parts that confuse beginners. But all I got was just responsibilities and unclear direction. I left the internship midway as it didn't satisfy my learning style like the job description promised it would.