1 day ago
Sunnyvale, CA, USAIntern
H1B sponsor
Responsibilities
- Learn Illumio’s platform and product security practices across the design-through-release lifecycle.
- Participate in secure code reviews and threat modeling with security engineers.
- Help identify, triage, and remediate vulnerabilities using static and dynamic analysis, penetration testing, and bug bounty findings.
- Build security automation scripts and tools to improve vulnerability detection and triage.
- Research emerging threats, attack vectors, and mitigation strategies.
- Create security documentation, remediation guides, and secure coding guidance for engineering teams.
Requirements
- Currently enrolled full time in a bachelor’s or master’s degree program in computer science, software engineering, cybersecurity, or a related field, with expected graduation in Winter 2026 or Spring 2027.
- Coursework or project experience in secure coding, application security, or network security.
- Familiarity with at least one programming language such as Python, Ruby, Go, or C++.
- Strong interest in application security, vulnerability management, and secure software development.
- Basic understanding of common vulnerabilities such as the OWASP Top 10 is preferred.
- Ability to work independently and collaboratively, with strong communication skills and a passion for learning.
Benefits
- 12-week internship program beginning May 24, 2027, or June 21, 2027.
- Four on-site days per week at Illumio’s Sunnyvale, California headquarters.
- Hands-on exposure to real-world product security challenges, security tools, vulnerability management, threat modeling, and secure code review.
- Mentorship from experienced security engineers and technical leaders in a supportive and inclusive environment.
About Illumio
Illumio builds Zero Trust segmentation software that maps application traffic and enforces fine‑grained policies to contain ransomware and stop lateral movement across data center, cloud, and endpoint environments. Its products (e.g., Illumio Core, Illumio Edge, and CloudSecure) are sold to enterprises via subscription with accompanying services and integrations. Founded in 2013 and headquartered in Sunnyvale, California, the company is privately held and serves hybrid and multi‑cloud customers globally.