Edu Swap
Logo Wavestone

Internship - Technical Audits and Penetration Testing: Carrying Out and Detecting an Attack in an Industrial Environment

WavestoneCompany website

PuteauxPublished on 26 October 2026

You study real attacks on industrial systems such as PLCs and SCADA, build test mock-ups and design new ways to detect these attacks.

ApplySign-up required

Job description

You join Wavestone in Puteaux on an industrial cybersecurity topic. Attacks on PLCs and SCADA systems are rising, and standard detection tools work poorly on them.

The internship aims to build up the firm’s know-how on these attacks. Supervised by a consultant and a manager, you learn how industrial systems work and how to protect them through hands-on work: mock-ups, exploit code and proofs of concept.

The exact topic is confirmed at the start of the internship. This final-year internship can lead to a job.

What you'll do

  • Build technical expertise by studying real industrial attacks
  • Design industrial mock-ups to be used as demonstrators
  • Develop exploit code against equipment (PLCs, SCADA…) or industrial protocols
  • Define new detection strategies and validate them through Proofs of Concept
  • Update industrial audit methods to cover the latest threats and attack vectors.

Who they're looking for

  • You hold, or are about to earn, a degree from an engineering school, business school or university, with solid training in and/or a strong interest in technology and cybersecurity.
  • Above all, we are looking for curious, structured people with strong analytical skills, able to handle complex problems and talk with both business and technical contacts.

Prepare your interview

  1. Learn what Wavestone does, the sector it works in and the projects on its website.
  2. Go through each task listed here and work out why the team needs it done.
  3. Prepare a real example for each task, then tie it back to what the company does.
See the full method and a sample answer (in French)

Written by Edu Swap from the listing and, where there is one, the company website. Check the listing to make sure it's still open.