External organisations for thesis or internship

Below some external organisations where students have done cybersecuity-related research internship or master theses in the past.

Searching the archive of master theses for security-related keywords can provide examples of past thesis projects at companies.

There is a broad range of companies, as you can see below, so good to think about the topic, the kind of research, and the kind of organisation that appeals to you:

• Companies specialising in cyber security and that do security evaluations, pen-testing, Red/Blue Teaming or offer SOC-services, such as
  • Bureau Veritas (formerly called Secura),
  • Hunt & Hackett,
  • Sector7 at CompuTest,
  • KeySight (formerly called Riscure),
  • Brightsight,
  • Fox-IT,
  • Radically Open Security,
  • Northwave,
  • Qbit,
  • Red Team Security (in Arnhem),
  • KPN Red Team.
  Asking for tips from fellow students in the RU-CTF Discord can be useful if you are interested in practical, offensive side of security.
• Cyber security divisions of more general consultancy firms, such as KPMG, Deloitte, PWC, Accenture, and Ernst & Young.
• Banks, such as Rabobank, ABN AMRO, ING, SNS Bank, or Van Lansschot Kempen.
• Other companies in the financial sector such as CCV, and UL Transaction Security.
• Firms that produce security technologies, such as Compumatica, Sentyron, Irdeto, NXP, or Bosch Security.
• Manufacturers of products that contain IT and hence have security risk, such as Philips, Omron in Den Bosch, or Signify.
• Software houses such as InfoSupport (see also here), Capgemini, or Centric.
• Public utility companies, such as Alliander in Arnhem.
• SURF, which provides IT services and develops software for Dutch universities, incl. EduRoam and EduVPN.
• Research institutes such as
  • TNO,
  • SIDN labs in Arnhem (the research lab of the foundation controlling the .nl domain),
  • ENCS in the Hague (on security of critical infrastructure, esp. electricity grid),
  • Netherlands Forensics Institute (NFI).
• Organisations in the public sector, such as the
  • National Cyber Security Centre (NCSC),
  • RDI, the government agency responsible for overseeing the Cyber Resilience Act, in Amersfoort,
  • UWV in Amsterdam,
  • Autoriteit Persoonsgegevens, the Dutch DPA,
  • RDW, the Dutch Road Transport Agency.
  Two websites that collect internship and thesis opportunities at Dutch government organisations are i-Partnership and Werken for NL. Most of this info is in Dutch.