MWR CyberSec Virtual Internship (16 weeks) - Break into Web App Security

Want real, practical cybersecurity experience while you’re still studying? Join MWR CyberSec’s 16-week Virtual Internship: a structured, hands-on program that teaches web application security and pentesting fundamentals, ending with a 4-week capstone challenge. 

Top performers may be invited to a 2-week in-person internship at our Sandton offices, with potential future opportunities at MWR. 

What it is 

• 16 weeks total 
• 12 weeks learning + 4-week capstone challenge 

Weekly commitment: 

• 90-min live workshop 
• 90-min weekly assignment 
• Delivered remotely via Microsoft Teams 
• Assignments delivered via TryHackMe (progress tracked) 

Who can apply 

• Any registered tertiary student in South Africa 
• Any nationality welcome however you must be currently registered and able to submit proof of registration for a South African University 

When workshops happen 

• Tuesdays, 18:00-19:30 

Important dates 

• 2 March 2026 - Applications close 
• 3 March 2026 - Virtual Internship starts 
• 19 May 2026 - Capstone starts 
• 17 June 2026 - Capstone ends (grading begins) 
• 23 June 2026 - Grading ends, top candidates invited 
• 6-17 July 2026 - In-person internship (Sandton) 

What you get 

• Practical, real-world learning in web app security 
• MWR Certificate of Completion (on successful completion) 
• Feedback on your performance and next steps 

How to apply (simple) 

No CV or cover letter required. You’ll need: 

• Proof of registration (South African tertiary institution) 
• Your TryHackMe username 
• The email address linked to your TryHackMe account 

Sign up and commit to showing up weekly. 

 

FAQ (all the extra detail) 

1) Why are you running a virtual internship? 

MWR has limited capacity for in-person interns. This program lets more students gain real, structured experience, and it also helps us identify strong candidates for the in-person internship. 

2) Is this a job? 

No. This is a training + assessment program (virtual internship). However, top performers may be invited to the in-person internship and select candidates may be considered for future roles. 

3) What’s the weekly structure of a workshop? 

Each Tuesday session (18:00-19:30) typically includes: 

• ~30 min theory 
• ~30 min practical walkthrough 
• ~30 min Q&A 

4) How much time will I need each week? 

Plan for: 

• 90 minutes live workshop 
• Up to 90 minutes for the weekly assignment 
  Some weeks include optional extra challenges/resources if you want to go deeper. 

5) Where does everything happen? 

• Workshops: Microsoft Teams, meeting links will be sent on the week of the workshop. 
• Assignments and progress tracking: TryHackMe 

6) Do I need a TryHackMe account? 

Yes. You’ll submit your TryHackMe username and the email linked to that account during application. You do not need TryHackMe premium for the virtual internship. 

7) Will sessions be recorded? Can I watch later? 

Sessions may be recorded, but recordings won’t be shared after the workshop ends. If you miss the workshop, you miss that content. 

8) What’s the “3-strike rule”? 

To keep the course fair and to respect the investment involved: 

• If you miss/don’t submit 3 assignments, you will be removed from the course. 

9) What exactly is the capstone challenge? 

The capstone is the final 4 weeks. You’ll complete a mock web application penetration test against a web app MWR created, including the testing and reporting you’d do in real consulting w