Illumio
Security Research, Intern
Sunnyvale, California - HQ · Intern · Internship
Stay score
odds of building a lasting career here
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience.
- Recognized as a Leader in the Forrester Wave™ for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.
- THIS IS A 12 WEEK INTERNSHIP PROGRAM BEGINNING ON MAY 24TH 2027 OR JUNE 21ST 2027 LOCATION: 4 ON-SITE DAYS A WEEK IN SUNNYVALE, CA HEADQUARTERS.
Responsibilities
- Help build and curate structured datasets connecting threats, campaigns, indicators, vulnerabilities, and attacker techniques.
- Explore how threat intelligence and security telemetry can be combined to develop new detection ideas.
- Collaborate with threat researchers, data scientists, engineers, and product teams to communicate findings and potential security improvements.
Requirements
- Currently enrolled in a full-time Bachelor's or Master's degree program in Computer Science, Cybersecurity, Data Science or a related technical field with an expected graduation date in Winter 2027/Spring 2028
Nice to have
- Experience in these areas is helpful, but not required:
- Experience working with network or security telemetry, logs, or large datasets
- Familiarity with Python data analysis tools such as pandas or NumPy
- Experience experimenting with ML libraries such as scikit-learn, PyTorch, or similar frameworks
- Participation in CTFs, security competitions, academic research, open-source projects, or personal security projects
- Coursework, research projects, CTFs, ML projects, open-source contributions, or independent security research can all demonstrate relevant experience.
- What You'll Gain:
- During the internship, you'll have opportunities to:
Skills
- ONWARDS TOGETHER!
- THIS IS A 12 WEEK INTERNSHIP PROGRAM BEGINNING ON MAY 24TH 2027 OR JUNE 21ST 2027
- 4 ON-SITE DAYS A WEEK IN SUNNYVALE, CA HEADQUARTERS.
Benefits
- Explore machine learning and statistical techniques for security use cases such as anomaly detection, behavioral analysis, clustering, and classification.
- Strong interest in cybersecurity, security research, threat intelligence, or machine learning
Company info
- Research emerging threats, vulnerabilities, attacker campaigns, and evolving adversary techniques.
- Analyze threat intelligence including malicious IP addresses, domains, attacker infrastructure, and adversary behaviors.
- Investigate network activity associated with command-and-control, suspicious communications, and other potentially malicious behavior.
- Analyze security and network telemetry to identify patterns that may distinguish normal from suspicious activity.
- Experiment with ML models and detection approaches, evaluating their effectiveness, limitations, and potential false positives.
- Present research, experiments, and key learnings at the end of the internship.
- Exposure to threat intelligence concepts such as IOCs, attacker campaigns, malware, vulnerabilities, or MITRE ATT&CK
- Basic understanding of networking concepts and protocols such as TCP/IP, DNS, and HTTP/HTTPS
- Familiarity with Python, SQL/KQL, notebooks, or similar programming and data-analysis tools, with an interest in analyzing security and network telemetry
- Ability to research technical topics and clearly communicate findings
- Curiosity about how attackers operate and how their behaviors can be detected
This listing is sourced directly from Illumio's careers page and normalized into a canonical job model.