{"id":2965848,"url":"https://alion.io/job/illumio-security-research-intern","title":"Security Research, Intern","company":{"id":4083,"name":"Illumio","domain":"illumio.com","url":"https://alion.io/company/illumio","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":78,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":73,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Early Careers","role_family":"Early Careers","seniority":"intern","employment_type":"internship","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sunnyvale, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":37,"max":37,"currency":"USD","period":"hour","gross":null,"usd_annual":74000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"DNS","optional":false},{"name":"Machine Learning","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"TCP/IP","optional":false},{"name":"Zero Trust","optional":false},{"name":"NumPy","optional":true},{"name":"PyTorch","optional":true},{"name":"Scikit-learn","optional":true}],"status":"live","first_seen_at":"2026-10-20T21:12:47Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-24T23:09:29Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Onwards Together!\nIllumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience. Powered by the Illumio AI Security Graph, our breach containment platform identifies and contains threats across hybrid multi-cloud environments - stopping the spread of attacks before they become disasters.\nRecognized as a Leader in the Forrester Wave™ for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.\nThis is a 12 week internship program beginning on May 24th 2027 or June 21st 2027\nLocation: 4 on-site days a week in Sunnyvale, CA Headquarters.\nOur Team's Vision:\nAt Illumio, the Office of the CTO and Security helps shape the company’s strategic technical direction while advancing the security of Illumio and our customers. Within this organization, the Threat Research team studies emerging threats, adversary behaviors, and evolving technologies, working closely with Engineering and Product Management to translate research into stronger security capabilities and customer outcomes.\nWe are looking for a curious and motivated Security Research Intern to join the team. You’ll work alongside experienced threat researchers to investigate real-world cyber threats, understand how attackers operate, analyze their behaviors and infrastructure, and explore how research can inform new security insights and detection capabilities.\nThis is a hands-on opportunity to work at the intersection of threat research, threat intelligence, security telemetry, and data analysis. You’ll tackle problems grounded in real-world adversary activity, with opportunities to explore emerging technologies and techniques, including AI and ML, where relevant to the research.\nYour Impact:\nResearch emerging threats, vulnerabilities, attacker campaigns, and evolving adversary techniques.\n\nAnalyze threat intelligence including malicious IP addresses, domains, attacker infrastructure, and adversary behaviors.\n\nInvestigate network activity associated with command-and-control, suspicious communications, and other potentially malicious behavior.\n\nAnalyze security and network telemetry to identify patterns that may distinguish normal from suspicious activity.\n\nExplore machine learning and statistical techniques for security use cases such as anomaly detection, behavioral analysis, clustering, and classification.\n\nExperiment with ML models and detection approaches, evaluating their effectiveness, limitations, and potential false positives.\n\nHelp build and curate structured datasets connecting threats, campaigns, indicators, vulnerabilities, and attacker techniques.\n\nExplore how threat intelligence and security telemetry can be combined to develop new detection ideas.\n\nCollaborate with threat researchers, data scientists, engineers, and product teams to communicate findings and potential security improvements.\n\nPresent research, experiments, and key learnings at the end of the internship.\n\nYour Toolkit:\nCurrently enrolled in a full-time Bachelor’s or Master’s degree program in Computer Science, Cybersecurity, Data Science or a related technical field with an expected graduation date in Winter 2027/Spring 2028\n\nStrong interest in cybersecurity, security research, threat intelligence, or machine learning\n\nExposure to threat intelligence concepts such as IOCs, attacker campaigns, malware, vulnerabilities, or MITRE ATT&CK\n\nBasic understanding of networking concepts and protocols such as TCP/IP, DNS, and HTTP/HTTPS\n\nFamiliarity with Python, SQL/KQL, notebooks, or similar programming and data-analysis tools, with an interest in analyzing security and network telemetry\n\nAbility to research technical topics and clearly communicate findings\n\nCuriosity about how attackers operate and how their behaviors can be detected\n\nNice to Have:\nExperience in these areas is helpful, but not required:\nExperience working with network or security telemetry, logs, or large datasets\n\nFamiliarity with Python data analysis tools such as pandas or NumPy\n\nBasic understanding of machine learning or statistical techniques, such as classification, clustering, or anomaly detection\n\nExperience experimenting with ML libraries such as scikit-learn, PyTorch, or similar frameworks\n\nInterest in applying machine learning to cybersecurity problems such as behavioral analysis or threat detection\n\nParticipation in CTFs, security competitions, academic research, open-source projects, or personal security projects\n\nYou don’t need to already be an expert in cybersecurity or machine learning. We’re looking for students with strong technical fundamentals, curiosity, and an eagerness to learn across disciplines. Coursework, research projects, CTFs, ML projects, open-source contributions, or independent security research can all demonstrate relevant experience.\nWhat You’ll Gain:\nDuring the internship, you’ll have opportunities to:\nBuild practical experience in security research, threat intelligence, and adversary analysis.\n\nDevelop a deeper understanding of network security, security telemetry, and threat detection.\n\nLearn how to investigate emerging threats and translate research into detection and product ideas.\n\nGain exposure to emerging approaches, including machine learning and data-driven security techniques, where relevant.\n\nWork alongside experienced threat researchers and learn how security research operates in a real-world cybersecurity organization.\n\nYou’ll finish the internship with experience investigating real security problems and understanding how threat research, security telemetry, and machine learning can work together to identify malicious behavior and improve detection capabilities.\n#LI-PO1 #LI-ONSITE\nOur Commitment\nIllumio believes that an environment of unique backgrounds, experiences, viewpoints, and individual contributions creates a culture of belonging, drives our future, and makes us stronger together in support of our customers and their success.\nAll official job offers from our company are extended directly by our recruitment team and will be sent through an official E-Signature document for your review and signature. Please be aware that we do not ask for any personal information in the process of extending offers of employment, such as financial details or social security numbers. Upon acceptance of any offer, we will request such information as part of the onboarding process prior to or on your first day of employment, and only after completing a background check through an authorized third-party vendor. If you receive any communication asking for personal details outside of these processes, please contact us immediately to verify the authenticity of the request. Your security is important to us, and we are committed to a safe and transparent hiring experience.\nFor roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Illumio will consider for employment qualified applicants with arrest and conviction records.","description_format":"text","description_chars":7137,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Cloud Security","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-21T00:03:55Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 38 · green card filings: 4","filings_12m":38,"filings_prev_12m":35,"green_card_filings_12m":4,"median_offered_wage_usd":168929,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":73,"reasons":["conf:2","velocity","win:early","comp:junior"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":74000,"is_top_pay":true},"html_url":"https://alion.io/job/illumio-security-research-intern","json_url":"https://alion.io/job/illumio-security-research-intern.json","meta":{"generated_at":"2026-10-25T01:09:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1778,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4083},"rest":"https://alion.io/mcp/rest/get_company?id=4083"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fillumio-security-research-intern"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fillumio-security-research-intern"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fillumio-security-research-intern"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/illumio-security-research-intern\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fillumio-security-research-intern"}]}