Do research as a student

How research helps an industry career

• Applied research and development (R&D). Security vendors and large technology companies hire people to build and test new detection and defense methods. Palo Alto Networks lists security research among its early-career hiring areas^[1], and Microsoft's student careers page listed a security research internship when we checked^[2].
• Product security. Product security teams find flaws in their own company's software before attackers do. Research on attacks and defenses trains the same threat modeling and careful testing.
• Threat research. Threat intelligence teams publish analyses of attacker campaigns. Clean data analysis, careful claims and clear writing are the skills a paper needs, too.

Publications, posters and talks are portfolio items. List each on your resume with the venue and date, and link the paper or slides. A research project also gives you strong STAR stories for interviews: a problem, what you did and a measured result.

Work in this order

1. Topic. Pick a problem that is new, important and tied to what stakeholders need. If no one studies it, ask why before you start.
2. Domain literature. Start with survey papers. Then read the last three to five years of top venues: IEEE Symposium on Security and Privacy (S&P), USENIX Security, the ACM Conference on Computer and Communications Security (CCS) and its AISec workshop, IEEE Transactions on Dependable and Secure Computing (TDSC) and IEEE Intelligence and Security Informatics (ISI). Keep a literature matrix with one fact per cell.
3. Method literature. Find the baselines and the state of the art (NeurIPS, ICLR and KDD for machine learning). Check data fit, labels, class imbalance and interpretability.
4. Gaps and research questions. Write questions that start with how or why, never yes-or-no questions.
5. Design. Show data, method and evaluation in one diagram. Name the ground truth, the baselines and the sensitivity analyses.
6. Results. Explain why each result happened, and do not overstate it.
7. Front matter last. Write the conclusion, then the introduction, then the abstract (200 to 300 words). Keep the title near eight words, with no acronyms.

Report your progress

• Research updates. Put the bottom line first: your status and what you need. Number slides, caption figures, cite claims and report what failed.
• Quad chart. One slide with four boxes: (1) objective and motivation, (2) approach and data, (3) results and impact with a metric and a baseline, (4) next steps and outputs. Use bullets, 12-point text or larger and dated milestones.
• Posters. Put the finding in the title and build around one central figure. Use body text of 28 points or larger, and confirm the poster size with the event.
• Papers. Turn approved slides into section headings and follow the venue's template. Read the draft aloud, then get peer review, then co-author review. Give your mentor at least a week.

Work with a mentor

• Meet on a regular schedule. Missed meetings stall projects more than hard problems do.
• Separate brainstorming from updates. Book a different meeting when you need to think through ideas.
• Ask about computing early. Your mentor can tell you what campus computing is available for your project.

Ethics and approvals

Complete your campus research ethics training before you start. If your project collects data from or about people (surveys, interviews, user logs), talk to your Institutional Review Board (IRB) before you collect it. The federal Common Rule (45 CFR 46) sets the baseline protections for human subjects research^[3][4].

Security research can affect people who never agreed to take part, such as users of a network you measure. The Menlo Report sets out ethical principles for information and communication technology research^[5].

Research with CCAIR

CCAIR studies the security of AI systems and the use of AI for cybersecurity. Read about current research and publications, then use the contact page to ask about projects. Send a resume and one paragraph on the problem you want to work on.

Need data for a project? Start with Find data.

Related Pathway Finder roles

Each role guide covers the work, the realistic first job, starter certifications and free practice.

Sources

We checked each source in October 2026. Rules, prices and dates change, so confirm them on the source before you act.

1. [1] Palo Alto Networks. Early careers at Palo Alto Networks.
2. [2] Microsoft Careers. Early in profession: students.
3. [3] HHS Office for Human Research Protections. 45 CFR 46 (the Common Rule).
4. [4] HHS Office for Human Research Protections. Office for Human Research Protections.
5. [5] Department of Homeland Security (archived). The Menlo Report.