Code and Theory Visa Sponsorship Jobs USA
Code and Theory is a digital-first creative agency known for blending design, strategy, and technology for major brands. It sponsors a modest but consistent range of visa types, including H-1B visa and E-3 visa, making it a viable target for international creative and tech professionals navigating the U.S. job market.
Find Code and Theory JobsOverview
Showing 5 of 8+ Code and Theory Visa Sponsorship Jobs USA
See all Code and Theory Visa Sponsorship Jobs USA
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Code and Theory Visa Sponsorship Jobs USA.
Get Access To All JobsINTRODUCTION
The Machine is the agentic operating system for marketing, built by Code & Theory. It plugs into the tools marketing teams use and turns disconnected workflows into a single intelligent system, connecting brand strategy, creative production, and media performance. The Machine helps power agencies across Stagwell's network and world-leading brands.
We're looking for a Senior Security Engineer to be the hands-on technical backbone of our security and compliance program across our SaaS products and client delivery work. This role would own the implementation — building the controls, tooling, automation, and processes that make our security program real. You'll work directly with engineering teams, embed into delivery workflows, and be the person who actually builds and runs the systems that keep our products and client data secure.
Our engineers are AI native and engage in and advance the state of the art in the practice of software development flow with AI.
ROLE AND RESPONSIBILITIES
- Build and maintain security controls across our cloud infrastructure and SaaS products — identity and access, encryption, logging, monitoring, secrets management, and multi-tenancy patterns
- Own the technical implementation of SOC 2 Type II, ISO 27001, and ISO 42001 compliance — building evidence pipelines, automating control testing, and maintaining audit artifacts
- Instrument and operate security monitoring and alerting across cloud environments (GCP, AWS, and/or Azure), with hands-on responsibility for threat detection, log aggregation, and response
- Partner with engineering teams to embed security into CI/CD pipelines — vulnerability scanning, SAST/DAST tooling, dependency management, container security, and secure code review
- Implement privacy controls in product and client environments, including data classification, retention, access controls, and audit logging aligned to HIPAA, GDPR, and CCPA/CPRA requirements
- Execute the client engagement security model — provisioning and deprovisioning access, configuring environment segregation, and meeting client-specific delivery security requirements
- Conduct hands-on vendor security assessments, reviewing third-party architectures, configurations, and data handling practices
- Maintain and test incident response playbooks; lead technical response and forensic analysis during security events
- Build and maintain AI-specific security controls — reviewing model inputs/outputs, securing agent workflows, managing prompt injection and data leakage risks in AI-enabled products
- Contribute to the security questionnaire and RFP response library, serving as the technical author for detailed customer assurance requests
BASIC QUALIFICATIONS
- 5+ years of hands-on security engineering experience, ideally spanning SaaS product environments and/or professional services/agency delivery
- Deep practical knowledge of cloud security in at least one major platform (GCP, AWS, or Azure) — IAM, networking, secrets management, logging, and security tooling
- Hands-on experience with SOC 2 Type II and ISO 27001 control implementation — not just familiarity with frameworks, but actually building and operating the controls
- Experience building security automation across CI/CD pipelines — integrating vulnerability scanners, SAST/DAST tools, and policy enforcement into engineering workflows
- Working knowledge of privacy regulations (HIPAA, GDPR, CCPA/CPRA) and experience implementing technical controls that operationalize compliance requirements
- Proficiency with security monitoring and SIEM tooling — building detection logic, tuning alerts, and responding to incidents with real technical depth
- Strong communication skills — you can explain a complex finding clearly to an engineer, a PM, or a client, and write a crisp, credible response to a security questionnaire
- Comfort working across a distributed, fast-moving organization with multiple concurrent workstreams
- Experience working with AI-enabled development tools and integrating security thinking into AI-assisted workflows
- Hands-on experience reviewing and hardening AI agent workflows — understanding risks like prompt injection, data leakage, and model misuse in production systems
- Comfortable leveraging AI-enabled development tools and workflows to accelerate engineering, automation, debugging, and operational tasks
- Experience orchestrating multi-step AI or agent-driven workflows, including selecting appropriate models, tools, and execution patterns for different use cases
- Strong judgment reviewing and hardening AI-assisted output for security, scalability, maintainability, and architectural fit
- Experience building or maintaining prompts, evaluation frameworks, documentation, or operational context systems that improve engineering velocity and reliability
- Familiarity with automated evaluation and feedback loops for AI-enabled systems and workflows
PREFERRED QUALIFICATIONS
- Experience in agency, consultancy, or enterprise SaaS environments where you've had to meet varying client security requirements
- Familiarity with ISO 42001 and AI governance frameworks
- Experience securing multi-tenant SaaS architectures at the infrastructure and application layer
- Relevant certifications: CISSP, CCSP, AWS/GCP/Azure Security Specialty, CIPP, or similar
- Experience with infrastructure-as-code security tooling (e.g., Checkov, tfsec, OPA/Rego)
About us
Born in 2001, Code and Theory is a digital-first creative agency that sits at the center of creativity and technology. We pride ourselves on not only solving consumer and business problems, but also helping to establish new capabilities for our clients. With a global client roster of Fortune 100s and start-ups alike, we crave the hardest problems to solve. We have teams distributed across North America, South America, Europe, and Asia. The Code and Theory global network of agencies is growing and includes Kettle, Instrument, Left Field Labs, Create Group, Current, and TrueLogic.
Striving never to be pigeonholed, we work across every major category: from tech to CPG, financial services to travel & hospitality, government and education to media and publishing. We value the collaboration with our client partners, including but not limited to Adidas, Amazon, Con Edison, Diageo, EY, J.P. Morgan Chase, Lenovo, Marriott, Mars, Microsoft, Thomson Reuters, and TikTok.
The Code and Theory network is comprised of nearly 2,000 people with 50% engineers and 50% creative talent. We're always on the lookout for smart, driven, and forward-thinking people to join our team.
COMPENSATION
- The base compensation range for this role is $110,000 – $150,000 and spans multiple levels. We're open to hiring at the level that best matches the right candidate's experience. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, budget, and location.
INTRODUCTION
The Machine is the agentic operating system for marketing, built by Code & Theory. It plugs into the tools marketing teams use and turns disconnected workflows into a single intelligent system, connecting brand strategy, creative production, and media performance. The Machine helps power agencies across Stagwell's network and world-leading brands.
We're looking for a Senior Security Engineer to be the hands-on technical backbone of our security and compliance program across our SaaS products and client delivery work. This role would own the implementation — building the controls, tooling, automation, and processes that make our security program real. You'll work directly with engineering teams, embed into delivery workflows, and be the person who actually builds and runs the systems that keep our products and client data secure.
Our engineers are AI native and engage in and advance the state of the art in the practice of software development flow with AI.
ROLE AND RESPONSIBILITIES
- Build and maintain security controls across our cloud infrastructure and SaaS products — identity and access, encryption, logging, monitoring, secrets management, and multi-tenancy patterns
- Own the technical implementation of SOC 2 Type II, ISO 27001, and ISO 42001 compliance — building evidence pipelines, automating control testing, and maintaining audit artifacts
- Instrument and operate security monitoring and alerting across cloud environments (GCP, AWS, and/or Azure), with hands-on responsibility for threat detection, log aggregation, and response
- Partner with engineering teams to embed security into CI/CD pipelines — vulnerability scanning, SAST/DAST tooling, dependency management, container security, and secure code review
- Implement privacy controls in product and client environments, including data classification, retention, access controls, and audit logging aligned to HIPAA, GDPR, and CCPA/CPRA requirements
- Execute the client engagement security model — provisioning and deprovisioning access, configuring environment segregation, and meeting client-specific delivery security requirements
- Conduct hands-on vendor security assessments, reviewing third-party architectures, configurations, and data handling practices
- Maintain and test incident response playbooks; lead technical response and forensic analysis during security events
- Build and maintain AI-specific security controls — reviewing model inputs/outputs, securing agent workflows, managing prompt injection and data leakage risks in AI-enabled products
- Contribute to the security questionnaire and RFP response library, serving as the technical author for detailed customer assurance requests
BASIC QUALIFICATIONS
- 5+ years of hands-on security engineering experience, ideally spanning SaaS product environments and/or professional services/agency delivery
- Deep practical knowledge of cloud security in at least one major platform (GCP, AWS, or Azure) — IAM, networking, secrets management, logging, and security tooling
- Hands-on experience with SOC 2 Type II and ISO 27001 control implementation — not just familiarity with frameworks, but actually building and operating the controls
- Experience building security automation across CI/CD pipelines — integrating vulnerability scanners, SAST/DAST tools, and policy enforcement into engineering workflows
- Working knowledge of privacy regulations (HIPAA, GDPR, CCPA/CPRA) and experience implementing technical controls that operationalize compliance requirements
- Proficiency with security monitoring and SIEM tooling — building detection logic, tuning alerts, and responding to incidents with real technical depth
- Strong communication skills — you can explain a complex finding clearly to an engineer, a PM, or a client, and write a crisp, credible response to a security questionnaire
- Comfort working across a distributed, fast-moving organization with multiple concurrent workstreams
- Experience working with AI-enabled development tools and integrating security thinking into AI-assisted workflows
- Hands-on experience reviewing and hardening AI agent workflows — understanding risks like prompt injection, data leakage, and model misuse in production systems
- Comfortable leveraging AI-enabled development tools and workflows to accelerate engineering, automation, debugging, and operational tasks
- Experience orchestrating multi-step AI or agent-driven workflows, including selecting appropriate models, tools, and execution patterns for different use cases
- Strong judgment reviewing and hardening AI-assisted output for security, scalability, maintainability, and architectural fit
- Experience building or maintaining prompts, evaluation frameworks, documentation, or operational context systems that improve engineering velocity and reliability
- Familiarity with automated evaluation and feedback loops for AI-enabled systems and workflows
PREFERRED QUALIFICATIONS
- Experience in agency, consultancy, or enterprise SaaS environments where you've had to meet varying client security requirements
- Familiarity with ISO 42001 and AI governance frameworks
- Experience securing multi-tenant SaaS architectures at the infrastructure and application layer
- Relevant certifications: CISSP, CCSP, AWS/GCP/Azure Security Specialty, CIPP, or similar
- Experience with infrastructure-as-code security tooling (e.g., Checkov, tfsec, OPA/Rego)
About us
Born in 2001, Code and Theory is a digital-first creative agency that sits at the center of creativity and technology. We pride ourselves on not only solving consumer and business problems, but also helping to establish new capabilities for our clients. With a global client roster of Fortune 100s and start-ups alike, we crave the hardest problems to solve. We have teams distributed across North America, South America, Europe, and Asia. The Code and Theory global network of agencies is growing and includes Kettle, Instrument, Left Field Labs, Create Group, Current, and TrueLogic.
Striving never to be pigeonholed, we work across every major category: from tech to CPG, financial services to travel & hospitality, government and education to media and publishing. We value the collaboration with our client partners, including but not limited to Adidas, Amazon, Con Edison, Diageo, EY, J.P. Morgan Chase, Lenovo, Marriott, Mars, Microsoft, Thomson Reuters, and TikTok.
The Code and Theory network is comprised of nearly 2,000 people with 50% engineers and 50% creative talent. We're always on the lookout for smart, driven, and forward-thinking people to join our team.
COMPENSATION
- The base compensation range for this role is $110,000 – $150,000 and spans multiple levels. We're open to hiring at the level that best matches the right candidate's experience. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, budget, and location.
Job Roles at Code and Theory
See all Code and Theory Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Code and Theory roles.
Get Access To All JobsTips for Finding Code and Theory Visa Sponsorship Jobs USA
Target roles at the intersection of design and technology
Code and Theory's sponsorship history skews toward specialized roles in digital strategy, UX, and engineering. Focus your application on positions where creative and technical skills overlap, these are most likely to meet visa specialty occupation requirements.
Australian citizens should specifically explore the E-3 pathway
Code and Theory has sponsored E-3 visas, making it worth pursuing for Australian nationals. The E-3 requires less employer overhead than the H-1B, which can make agencies more willing to sponsor it for strong candidates in creative and strategy roles.
Understand that agency hiring cycles follow client demand
Marketing and advertising agencies like Code and Theory staff up around project wins and client growth. Time your outreach to coincide with major campaign seasons or publicly announced client partnerships, when headcount needs are highest and sponsorship conversations are more natural.
Lead with your portfolio before raising sponsorship
In the creative industry, work speaks first. Get a recruiter genuinely interested in your portfolio before the sponsorship question comes up, agencies are far more likely to initiate the conversation themselves when they're already sold on your capabilities.
Filter for verified sponsors before applying
Not every agency that posts jobs will sponsor visas. Migrate Mate surfaces verified sponsors so you can filter by real sponsorship history, helping you focus time on companies like Code and Theory that have an active track record rather than guessing from job descriptions.
F-1 OPT and CPT candidates have a clear entry point
Code and Theory supports F-1 OPT and CPT, giving international students a practical way to build experience within the agency. Strong performance during OPT is often the most direct path to a longer-term sponsorship conversation for H-1B or other visa types.
Frequently Asked Questions
Does Code and Theory sponsor H-1B visas?
Yes, Code and Theory sponsors H-1B visas. Its sponsorship activity is modest rather than high-volume, which is typical for a mid-sized creative agency in the marketing and advertising space. Sponsored roles tend to require specialized skills in areas like digital strategy, product design, or engineering, positions where the specialty occupation standard is clearly met.
Which visa types does Code and Theory sponsor?
Code and Theory sponsors H-1B, E-3 visa, F-1 OPT, F-1 CPT, and TN visas. This range covers a meaningful cross-section of international applicants, from Australian nationals on the E-3 visa to students on OPT and Canadian or Mexican professionals on TN visa status. The breadth of visa types suggests a genuine willingness to work through sponsorship for the right candidates.
What departments or roles at Code and Theory are most likely to receive visa sponsorship?
Sponsorship at agencies like Code and Theory typically concentrates in roles that require demonstrable specialized expertise, think UX design, data analytics, software engineering, and digital strategy. Generalist or account management roles are less likely to clear the specialty occupation bar. If your background sits at the technical or creative-technical intersection, you're in the strongest position to be considered for sponsorship.
How do I find open visa-sponsored jobs at Code and Theory?
Migrate Mate is the most direct way to find open roles at Code and Theory that come with verified sponsorship history. Rather than combing through generic job postings and guessing whether sponsorship is available, Migrate Mate lets you filter by company and visa type so you can apply with confidence that sponsorship is actually on the table.
How do I approach the application process at Code and Theory as an international candidate?
Lead with your work and expertise rather than opening with visa questions. Recruiters at creative agencies respond to portfolios and demonstrated results first. Once there's mutual interest, raise your visa status clearly and early in the formal interview process. Code and Theory's track record across multiple visa types suggests familiarity with the process, so a straightforward conversation about your status is unlikely to derail a strong candidacy.