Engineering Intern, Product Security

Thinklance LLP; Sunnyvale (CA); On-site; USD 34,000 - 55,000; Full time

Benefits offered by this job

Mentorship from security engineers

Hands-on security experience

Job summary

Thinklance LLP is seeking a student security intern to gain hands-on experience with Illumio's platform and product security practices. You will learn how vulnerabilities are identified and remediated using static/dynamic analysis, tests, and bug bounty findings, and participate in secure code reviews and threat modeling alongside experienced engineers.

You will help build automation scripts, research emerging threats, and contribute to security documentation that promotes secure coding across

Qualifications

• Pursuing a full-time BS/MS in CS/SE/Cybersecurity with graduation 2026/2027.
• Intro to secure coding, app security, or network security coursework.
• Familiarity with at least one programming language.
• Strong communication and teamwork abilities.
• Interest in vulnerability management and secure SDLC.

Responsibilities

• Gain in-depth knowledge of Illumio's platform and how product security protects it from design through release.
• Learn how vulnerabilities are identified, triaged, and remediated using findings from static and dynamic analysis tools, penetration tests, and bug bounty programs.
• Participate in secure code reviews and threat modeling alongside experienced security engineers.
• Help build security automation scripts and tools that streamline vulnerability detection and triage.
• Research emerging threats, attack vectors, and mitigation strategies relevant to Illumio's technology stack.
• Contribute to internal security documentation, such as best practices and remediation guides, and help promote secure coding practices across engineering teams.

Skills

Python

Ruby

Go

C++

Secure coding

Vulnerability management

Secure SDLC

Communication

Teamwork

Learning mindset

Education

Pursuing BS/MS in CS/SE/Cybersecurity

Tools

SAST

DAST

Dependency scanners

Threat modeling

Job description

Your Role

Here's what you will be doing:

• Gain in-depth knowledge of Illumio's platform and how product security protects it from design through release
• Learn how vulnerabilities are identified, triaged, and remediated using findings from static and dynamic analysis tools, penetration tests, and bug bounty programs
• Participate in secure code reviews and threat modeling alongside experienced security engineers
• Help build security automation scripts and tools that streamline vulnerability detection and triage
• Research emerging threats, attack vectors, and mitigation strategies relevant to Illumio's technology stack
• Contribute to internal security documentation, such as best practices and remediation guides, and help promote secure coding practices across engineering teams

About You

The company is looking for:

• Currently enrolled in a full-time Bachelor's or Master's degree program in Computer Science, Software Engineering, Cybersecurity or a related field with an expected graduation date in Winter 2026/Spring 2027
• Coursework or project experience in areas such as secure coding, application security, or network security
• Familiarity with at least one programming language (e.g., Python, Ruby, Go, C++); scripting experience is a plus
• Strong interest in application security, vulnerability management, and secure software development
• Basic understanding of common vulnerabilities (e.g., OWASP Top 10) is a plus
• Ability to work independently and as part of a team
• Strong communication and interpersonal skills
• A passion for learning and continuous improvement

Compensation & Benefits

• Hands-on experience with real-world product security challenges at Illumio
• Exposure to modern security tools, including SAST, DAST, and dependency scanners, and secure development practices
• Insight into how vulnerability management, threat modeling, and secure code review work in practice
• Mentorship from experienced security engineers and technical leaders
• A deeper understanding of how security is embedded into the software development lifecycle
• A supportive and inclusive environment that values curiosity, ownership, and continuous learning