A talent pipeline role, deliberately open. Not “working student cyber security”, but product security and security research: firmware, pentesting, reverse engineering, tooling. You support real assessments and learn the craft the way it is actually practiced.

What matters to us in selection is less “five years of experience” and more whether you have already taken something technically difficult apart on your own initiative.

What counts as evidence

A firmware RE project, even a router that did not survive.
A CTF write-up that shows how you think.
A tool you wrote because you needed it.
A protocol decoder, a parser, a small fuzzer.
A vulnerability research project, your own or as part of a course.
A homelab and a GitHub profile that is actually alive.

Useful starting points

Studies in computer science, IT security or electrical engineering, third semester or later.
Linux, Python, ideally C/C++.
First practical contact with any of: web pentesting, reverse engineering, embedded, CTF, security research.
German and English for internal communication and documentation.

What you will do

Support assessments: firmware analysis, unpacking, configuration and secrets, guided, never unsupervised.
Build tooling that makes repetitive steps faster, scripts, parsers, checklists.
Document findings so an engineering team can reproduce them.
Take part in research work, with your name on what you contribute.

Do not apply if …

… you expect a finished curriculum instead of real work.
… “temporary job until something better” is the plan.
… you want certificates collected for you. The boring foundations are yours to lay.

Honestly

Real work means real pace: sometimes you will sit on an unpacking problem for two days. That is the job, not a failure.
Small team: no junior department, no hand-holding apparatus, a mentor, the bench, and people who answer questions.
Hardware ships to the lab in Mannheim and to your desk alike; lab days are part of it.

What we offer

Real work, not shadow work: your name is on the tooling you build and the analyses you run.
Learning directly from seniors, at the bench, not in webinars.
Flexible hours around your lectures, 12–20 per week, remote with regular lab days in Mannheim.
A genuine path to a junior role after your degree.

What have you taken apart lately? GitHub, project links, a write-up, that belongs in the application. CV via the form, everything else comes at the bench. Not a 100% fit? Apply anyway.