IntermediateSecurity trackDE-CP-42

Cyber Resilience Act SBOM & Vulnerability Monitor

Internship role: Werkstudent:in Product Security. Generate SBOMs for a firmware and a web product, match them against CVE feeds daily and produce the vulnerability-handling log the CRA will require.

10 Guided Steps480h Internship TierSubmit: GitHub repo or evidence pack + live demo / report + README + milestone logbookVerified CertificateAI Rubric Graded

Program Overview

Internship role: Werkstudent:in Product Security. Generate SBOMs for a firmware and a web product, match them against CVE feeds daily and produce the vulnerability-handling log the CRA will require.

What you submit

GitHub repo or evidence pack + live demo / report + README + milestone logbook

Stack: Syft, Grype, CycloneDX, Python, GitHub Actions

How it is graded

Signals: Milestone gates met; measurable result reported; documentation; deployment or evidence reachable; reflective log

Functionality & requirements30
Technical quality & architecture25
Documentation15
Deployment & evidence15
Innovation10
Presentation5

Pass 60% · Merit 75% · Distinction 90%

Learning Outcomes

480-hour Germany programme. The EU Cyber Resilience Act puts SBOM and vulnerability handling on every German device maker's roadmap.

Target Audience

Engineering Students

Diploma, B.Tech, B.E., BCA, MCA, or M.Tech students seeking practical experience.

Aspiring Developers

Developers who want to build proof-of-work capstone projects for tech resumes.

Job Seekers

Graduates looking for AI-evaluated code review & verified industry credentials.