← All roles

Security Research, Intern

Illumio· Security
Apply on company site
Sunnyvale, California - HQInternPosted 4d ago

About the role

Security Research Intern position at Illumio (HQ Sunnyvale, CA). 12-week internship beginning May 24, 2027 or June 21, 2027, onsite in Sunnyvale with 4 on-site days per week.

Responsibilities

  • Research emerging threats, vulnerabilities, attacker campaigns, and evolving adversary techniques.
  • Analyze threat intelligence including malicious IP addresses, domains, attacker infrastructure, and adversary behaviors.
  • Investigate network activity associated with command-and-control, suspicious communications, and other potentially malicious behavior.
  • Analyze security and network telemetry to identify patterns that may distinguish normal from suspicious activity.
  • Explore machine learning and statistical techniques for security use cases such as anomaly detection, behavioral analysis, clustering, and classification.
  • Experiment with ML models and detection approaches, evaluating their effectiveness, limitations, and potential false positives.
  • Help build and curate structured datasets connecting threats, campaigns, indicators, vulnerabilities, and attacker techniques.
  • Explore how threat intelligence and security telemetry can be combined to develop new detection ideas.
  • Collaborate with threat researchers, data scientists, engineers, and product teams to communicate findings and potential security improvements.
  • Present research, experiments, and key learnings at the end of the internship.

Qualifications

  • Currently enrolled in a full-time Bachelor’s or Master’s degree program in Computer Science, Cybersecurity, Data Science or related technical field with expected graduation Winter 2027/Spring 2028.
  • Strong interest in cybersecurity, security research, threat intelligence, or machine learning.
  • Exposure to threat intelligence concepts such as IOCs, attacker campaigns, malware, vulnerabilities, or MITRE ATT&CK.
  • Basic understanding of networking concepts and protocols such as TCP/IP, DNS, and HTTP/HTTPS.
  • Familiarity with Python, SQL/KQL, notebooks, or similar programming and data-analysis tools, with an interest in analyzing security and network telemetry.
  • Ability to research technical topics and clearly communicate findings.
  • Curiosity about how attackers operate and how their behaviors can be detected.

Skills

Required:Threat researchThreat intelligenceNetworkingPythonCommunication

Benefits

  • Medical, Dental, Vision Coverage
  • Health and Dependent Savings Accounts
  • Life and Disability Programs
  • Paid Parental Leave
  • Voluntary Benefit Programs
  • Company Sponsored Wellness Program
  • Wellness Reimbursement Program
  • Retirement Savings
  • Equity Opportunities
  • Paid time off and Paid Holidays
  • Employee Incentive Program
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Illumio

The Breach Containment Company

Explore Illumio, the world's first breach containment platform. Stop cyber attacks before they spread with cloud detection and microsegmentation.

securitycybersecuritynetwork securityzero trustmicrosegmentationcloud detectioncyber attack prevention
Company profileWebsite

More open roles at Illumio