Security Operations Engineer Intern, Vulnerability Management (Summer 2025)

About Us

At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. 

We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us! 

Available location: Lisbon, Portugal

Role Summary

The Vulnerability Management Team oversees the entire lifecycle of a vulnerability, encompassing everything from configuring and maintaining vulnerability scanners to partnering with remediation teams, optimizing and scaling processes. This intern role entails reviewing and triaging vulnerability reports, developing automated solutions, streamlining and documenting processes.

About the Internship Program

The ideal summer intern is passionate about making the Internet a better place. You will work with strong engineers. You will push code this summer that touches hundreds of millions of web surfers. We like to get things done, so we are looking for interns who are curious and can take on and complete projects. This is a great opportunity for engineers that want to learn to develop at Internet scale.

What would you do as a Cloudflare intern?

• Ship and deliver projects over 12-16 weeks with autonomy and support.
• Work cross-functionally with various teams.
• Be assigned a mentor to guide you through the internship and help with career goals.
• Build your network across the company through our various in and out of office socials, networking programs, Employee Resource Group (ERG) programs, and Activity Groups (Cat or dog lovers, we’ve got communities for you! @Catflare @Doggos).
• Present your project to the entire company at the end of the internship.
• Get direct access to our executives and leadership team including our co-founders.
• Learn and develop skills through our professional development workshops.
• Write for our Cloudflare blog and be featured on Cloudflare.tv sessions. 
• Receive Cloudflare swag and free Cloudflare products!

You can check out our internship blogs to learn more about our program and hear directly from our past interns.

Role Responsibilities

• Triage vulnerabilities that are identified by different vulnerability scanners, such as OS, network, web, cloud and container scanners.
• Develop automated solutions that focus on removing manual tasks, eliminate inefficiencies and optimise work processes.
• Support stakeholder queries regarding vulnerabilities, scanning, processes and remediation.
• Streamline and document vulnerability management processes.

Role Requirements (Must-Have Skills)

• Proficient at automating using scripting languages (Python, Go).
• Experience with cloud services and applications (AWS, GCP, Azure).
• Good understanding of common networking protocols, encryption standards and the linux operating system.
• Understanding of at least one cybersecurity best practice/framework, such as NIST, MITRE, ATT&CK Framework, and OWASP top 10.
• Ability to effectively communicate, both verbal and written, regarding technical and security related concepts, processes and feedback.

Nice-to-Have Skills

• Experience with common vulnerability scanning tools, and developing procedures, reports and processes.
• Experience deploying and operating vulnerability scanners, such as Qualys, Rapid7, OpenVAS, etc.)
• Experience with containerized environments.
• Experience or familiarity working with Cloudflare’s products offering (e.g