About the role#
This is a 12-week internship focused on threat research, threat intelligence, and security telemetry. You will work within the Office of the CTO and Security to study adversary behaviors and emerging threats. The goal is to investigate real-world cyber threats and explore how research informs new security insights and detection capabilities. You will work alongside researchers, data scientists, and engineers to translate findings into security improvements.
What you'll do#
- Research emerging threats, vulnerabilities, attacker campaigns, and adversary techniques.
- Analyze threat intelligence, including malicious IP addresses, domains, and attacker infrastructure.
- Investigate network activity related to command-and-control and suspicious communications.
- Examine security telemetry to identify patterns that distinguish normal from suspicious activity.
- Explore machine learning and statistical techniques for security use cases like anomaly detection.
- Experiment with ML models and evaluate their effectiveness and limitations.
- Help curate structured datasets that connect threats, indicators, and vulnerabilities.
- Collaborate across teams to communicate findings and present your work at the end of the internship.
What you'll need#
- Current enrollment in a Bachelor’s or Master’s program in Computer Science, Cybersecurity, Data Science, or a related field.
- An expected graduation date in Winter 2027 or Spring 2028.
- Strong interest in cybersecurity, threat intelligence, or machine learning.
- Exposure to concepts such as IOCs, malware, vulnerabilities, or the MITRE ATT&CK framework.
- Basic understanding of networking protocols like TCP/IP, DNS, and HTTP/HTTPS.
- Familiarity with Python, SQL/KQL, or similar data analysis tools.
- Ability to research technical topics and communicate findings clearly.
- Curiosity about how attackers operate and how to detect their behaviors.
Location & details#
- Location: Sunnyvale, California.
- Modality: On-site (4 days a week at the headquarters).
- Term: Summer 2027 (starting May 24th or June 21st).
- Employment: Full-time internship.
About Illumio
Illumio operates in the computer and network security sector. The company focuses on ransomware and breach containment for organizations. It provides a platform that identifies and contains threats within hybrid multi-cloud environments. Founded in 2013, the firm maintains its headquarters in Sunnyvale, California. It employs between 501 and 1,000 people.
How to get in at Illumio
You gain a distinct advantage at Illumio by applying as soon as a role opens. Intern Insider sends an instant alert the moment a role matching your target is published, ensuring you apply among the first before the candidate pile grows. Getting your materials in early helps recruiters see your application before the volume becomes unmanageable.
You can also reach out to the recruiters behind Illumio roles to ask about the position or a referral. Intern Insider surfaces these specific contacts, which materially improves your response rates. Connecting directly with the people hiring for these security roles is often more effective than submitting your resume into a general queue.
