Legal Intern – Policy & Public Sector (ai & Cybersecurity Focus) (summer 2026)

Cloudflare Cloudflare · Enterprise · Washington, DC · Legal, Policy, Trust & Safety

Legal intern focused on AI and cybersecurity policy and compliance, tracking emerging legislation and regulations, and drafting legal memos. This role supports the Policy and Public Sector Legal teams in navigating the evolving regulatory landscape for AI and cybersecurity, ensuring compliance with government standards like FedRAMP and StateRAMP, and advocating for policies that promote a secure and innovative Internet.

What you'd actually do

  1. Track and analyze emerging artificial intelligence legislation and frameworks across North America, including US federal initiatives (e.g., Executive Orders, NIST AI RMF), state-level AI regulations (e.g., California, Colorado), and Canada’s Artificial Intelligence and Data Act (AIDA).
  2. Monitor updates to cybersecurity mandates such as CISA’s Secure by Design guidelines, SEC incident reporting rules, and critical infrastructure protection frameworks.
  3. Assist the Public Sector legal team in reviewing and updating compliance materials related to FedRAMP, StateRAMP, and IRAP requirements, helping to accelerate our mission to secure government entities.
  4. Draft legal memos, policy briefs, and internal guidance documents outlining how new North American tech regulations impact Cloudflare’s product roadmap, including our AI Gateway and zero-trust security services.

Skills

Required

  • Legal research and writing skills
  • Interest in technology law, public policy, cybersecurity, and artificial intelligence
  • Ability to distill dense regulatory text into clear, business-friendly advice
  • Self-starter mentality
  • Comfort navigating ambiguity
  • Thrive in a fast-paced, highly collaborative environment
  • 1L or 2L in an ABA-accredited law school
  • Anticipated graduation date of 2027 or 2028
  • Commitment to a minimum 12 week summer internship

Nice to have

  • Prior experience (internships, clinics, or pre-law career) in government, a public policy organization, or a technology company
  • Familiarity with Cloudflare’s products, cloud computing infrastructure, and the general mechanics of how the Internet works.
  • Coursework or certifications in data privacy (CIPP/US), cybersecurity law, or national security law.

What the JD emphasized

  • FedRAMP
  • StateRAMP
  • AI Gateway