Illumio

Illumio

Security Research, Intern

Sunnyvale, California - HQ · Intern · Internship

Sponsorship not specifiedDetected 20 hours ago
PythonSpringSQLCloud PlatformsMachine LearningPyTorchscikit-learnPandasNumPyData AnalysisData ScienceCybersecurityNetwork SecurityKQLDetection EngineeringTCP/IPDNSZero TrustResearchCommunication

Stay score

odds of building a lasting career here

40Risky
Cap-exempt (no lottery)0
Sponsors this role90
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

13 transfer filings in the last year, covering 13 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience.
  • Recognized as a Leader in the Forrester Wave™ for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.
  • THIS IS A 12 WEEK INTERNSHIP PROGRAM BEGINNING ON MAY 24TH 2027 OR JUNE 21ST 2027 LOCATION: 4 ON-SITE DAYS A WEEK IN SUNNYVALE, CA HEADQUARTERS.

Responsibilities

  • Help build and curate structured datasets connecting threats, campaigns, indicators, vulnerabilities, and attacker techniques.
  • Explore how threat intelligence and security telemetry can be combined to develop new detection ideas.
  • Collaborate with threat researchers, data scientists, engineers, and product teams to communicate findings and potential security improvements.

Requirements

  • Currently enrolled in a full-time Bachelor's or Master's degree program in Computer Science, Cybersecurity, Data Science or a related technical field with an expected graduation date in Winter 2027/Spring 2028

Nice to have

  • Experience in these areas is helpful, but not required:
  • Experience working with network or security telemetry, logs, or large datasets
  • Familiarity with Python data analysis tools such as pandas or NumPy
  • Experience experimenting with ML libraries such as scikit-learn, PyTorch, or similar frameworks
  • Participation in CTFs, security competitions, academic research, open-source projects, or personal security projects
  • Coursework, research projects, CTFs, ML projects, open-source contributions, or independent security research can all demonstrate relevant experience.
  • What You'll Gain:
  • During the internship, you'll have opportunities to:

Skills

  • ONWARDS TOGETHER!
  • THIS IS A 12 WEEK INTERNSHIP PROGRAM BEGINNING ON MAY 24TH 2027 OR JUNE 21ST 2027
  • 4 ON-SITE DAYS A WEEK IN SUNNYVALE, CA HEADQUARTERS.

Benefits

  • Explore machine learning and statistical techniques for security use cases such as anomaly detection, behavioral analysis, clustering, and classification.
  • Strong interest in cybersecurity, security research, threat intelligence, or machine learning

Company info

  • Research emerging threats, vulnerabilities, attacker campaigns, and evolving adversary techniques.
  • Analyze threat intelligence including malicious IP addresses, domains, attacker infrastructure, and adversary behaviors.
  • Investigate network activity associated with command-and-control, suspicious communications, and other potentially malicious behavior.
  • Analyze security and network telemetry to identify patterns that may distinguish normal from suspicious activity.
  • Experiment with ML models and detection approaches, evaluating their effectiveness, limitations, and potential false positives.
  • Present research, experiments, and key learnings at the end of the internship.
  • Exposure to threat intelligence concepts such as IOCs, attacker campaigns, malware, vulnerabilities, or MITRE ATT&CK
  • Basic understanding of networking concepts and protocols such as TCP/IP, DNS, and HTTP/HTTPS
  • Familiarity with Python, SQL/KQL, notebooks, or similar programming and data-analysis tools, with an interest in analyzing security and network telemetry
  • Ability to research technical topics and clearly communicate findings
  • Curiosity about how attackers operate and how their behaviors can be detected

This listing is sourced directly from Illumio's careers page and normalized into a canonical job model.