PortSwigger

PortSwigger runs two named early-career pathways, according to its careers pages, both centered on its Knutsford, England headquarters:

• Graduate Developers (engineering): new graduates program alongside experienced engineers on live production code from day one. targetjobs independently confirms Knutsford as the track's assessment location.
• Women in Tech: a multi-year university scholarship combined with paid work placements during term breaks and a longer placement year, for A-level students headed toward a computer science degree. The paid-work-plus-development-program structure is echoed independently by scholarship listings such as StudentJob.

Running both an engineering-track scheme and a separate scholarship-linked scheme in parallel means a candidate eligible for either is choosing between two distinct applications into the same firm, not one.

PortSwigger, the maker of the Burp Suite web-security testing toolkit, was bootstrapped and profitable from its 2008 founding until June 2024, when it took its first outside investment: $112 million from Brighton Park Capital (PortSwigger careers, corroborated by TechCrunch). That is 16 years of self-funded growth before any external capital entered the business. For a candidate, that history means the product and the company's market position were proven before any investor scaling pressure existed, a different risk profile from a freshly-funded security startup competing for the same candidates.

Not right now. PortSwigger has no internship or graduate roles listed today; new postings appear here as the firm opens them.

Applications to PortSwigger go through the firm's own careers site, one application per posting, each expecting a CV and cover letter written for that role.