Internship
Heidelberg Materials – CIMAR
Cybersecurity & GRC Intern
July–August 2026
Contributed to web application security assessment and cybersecurity governance work in an internship setting.
- Application security assessment
- Assessed an ASP.NET application using methodologies inspired by OWASP WSTG, OWASP Top 10, ASVS, and API Security Top 10.
- Testing tools
- Burp Suite, OWASP ZAP, Semgrep, Nmap, Gobuster, ffuf, and Nikto.
- Governance contribution
- Contributed to the NIST Cybersecurity Framework 2.0 and gained exposure to supplier cybersecurity risk assessment and governance processes.
- Verified findings
- Three Medium findings were identified, with no High or Critical findings. This included an open redirect vulnerability (CWE-601, CVSS 6.1), alongside validation issues that were identified and addressed.
This was an internship contribution to the work, not ownership of the entire security programme. No confidential infrastructure, application details, supplier information, or non-public procedures are disclosed.