Security Research Intern

About the role

Working alongside security researchers, architects, and engineering teams, you will review products during development, identify gaps in security visibility, and help ensure security monitoring capabilities are built in before products reach customers.This hands-on internship offers significant ownership, mentorship from senior researchers, and exposure to technologies that are not yet publicly available.

Investigate real-world nation state attacks to support the development of high-fidelity protection logic across complex cross-domain kill-chains. Apply security expertise to analyze massive telemetry sets using big-data query languages (KQL), reasoning over data to identify novel malicious patterns and engineer evidence-based detection rules.

Contribute to the implementation and coding of automated capabilities that autonomously investigate nation state threats, using AI assisted tooling and agentic flows. Assist in the refinement of protection coverage by analyzing real-world attack telemetry to improve the accuracy and performance of existing detection logics.

Contribute to a strategic feedback loop by documenting findings from attack data analysis to improve overall protection logic and system-wide security posture. Partner with engineering and product teams to translate research insights into production-ready code, helping to validate protection concepts and ship them at a global scale.

Required Currently pursuing a B.Sc., M.Sc., or Ph.D. in Computer Science, Computer Engineering, Cybersecurity, or a related technical field, with at least one year remaining before graduation. Solid understanding of computer science fundamentals, including operating systems, networking, software engineering, and distributed systems concepts.

Experience developing software or automation in one or more modern programming languages (e.g., Python, C#, Go, Java, or C/C++). Strong analytical and problem-solving skills, with the ability to investigate complex technical systems and identify root causes. Self-motivated learner who can work independently while collaborating effectively with researchers, security engineers, and product teams.

Interest in cloud security, threat hunting, detection engineering, incident response, or Blue Team security research. Experience analyzing large datasets, logs, telemetry, or security events to identify anomalies and security-relevant patterns. Familiarity with cloud platforms, Kubernetes, containers, or modern distributed systems architectures.

Understanding of operating system and networking fundamentals, including Windows or Linux internals, authentication, protocols, and security controls. Experience building automation, security tooling, or using AI-assisted workflows to improve investigations, analysis, or security operations.

Demonstrated passion for security through personal research projects, Capture-the-Flag (CTF) competitions, vulnerability research, open-source contributions, or related activities.