Engineering Intern, Product Security

The role

You will help secure products through secure code review, vulnerability triage, research, and automation. You will work alongside experienced security engineers to learn how security is embedded throughout the software development lifecycle.

What you will do

• Gain knowledge of Illumio's platform and product security
• Learn how vulnerabilities are identified, triaged, and remediated
• Participate in secure code reviews and threat modeling
• Help build security automation scripts and tools
• Research emerging threats, attack vectors, and mitigation strategies
• Contribute to internal security documentation

Required qualifications

• Currently enrolled in a full-time Bachelor's or Master's degree program in Computer Science, Software Engineering, Cybersecurity or a related field
• Expected graduation date in Winter 2026/Spring 2027
• Coursework or project experience in areas such as secure coding, application security, or network security
• Familiarity with at least one programming language (e.g., Python, Ruby, Go, C++)
• Strong interest in application security, vulnerability management, and secure software development
• Ability to work independently and as part of a team
• Strong communication and interpersonal skills
• A passion for learning and continuous improvement

Nice to have

• scripting experience
• Basic understanding of common vulnerabilities (e.g., OWASP Top 10)

Benefits

• Stipend
• Events & Experiences
• Opportunities to volunteer
• Fully stocked office, snacks and beverages
• Catered lunch from local restaurants every day

Before you apply

• Must have valid U.S. work authorization for the full duration of the internship
• Illumio does not provide immigration sponsorship for internship positions
• Employment authorization must be in place before employment begins
• Requires a background check through an authorized third-party vendor

About the company

Illumio is the leader in ransomware and breach containment. Their breach containment platform identifies and contains threats across hybrid multi-cloud environments.