Green Card Application Security Engineer Jobs
Application Security Engineer roles qualify for EB-2 and EB-3 green card sponsorship through the PERM labor certification process, which requires employers to document that no qualified U.S. workers are available before filing your I-140 petition. Security engineering's specialized degree and skills requirements make PERM approvals straightforward for most sponsoring employers.
Find Green Card Application Security Engineer JobsOverview
Showing 5 of 717+ Application Security Engineer jobs
See all 717+ Application Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Application Security Engineer roles.
Get Access To All JobsJob Description:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
Position Summary:
The Application Remediation Governance candidate will contribute to reduction of technology risk in the bank by driving down the time taken to remediate identified application vulnerabilities, working with application managers and risk partners to resolve vulnerabilities in a time frame aligned to the Bank’s risk appetite. The candidate will be at the forefront of the Bank’s response to the new AI-identified application vulnerabilities, working with application teams and driving remediation in a timely manner.
The candidate will attend report out calls following a security assessment of a particular application aligned with an assigned 4 dot hierarchy. Candidate will track the identified vulnerabilities in the system of record and work with the application or vendor manager until resolution. Candidate will update status of vulnerabilities as required in the system of record and will aid the application and/or vendor manager with any technical or process related queries during resolution of the identified vulnerabilities. Additionally, the candidate will be expected to aid with creation of periodic risk metrics relating to the role.
Responsibilities:
- Creates and maintains the team's application vulnerability portfolio.
- Responsible for being at the forefront of the Bank’s response to the novel threat of AI identified vulnerabilities, possession of a good understanding of LLM based vulnerabilities and the most effective and timely actions the team can take to minimize cyber risk to the Bank.
- Oversight and leadership responsibilities for ARG daily BAU activities.
- Leadership of the ARG team, including being proxy manager when required.
- Responsible for maintaining a balanced distribution of vulnerabilities between ARG team members to ensure workload balance.
- Work includes configuration of the SOR for all team members to view their portfolio, specifically alerting them to any items that require timely action (e.g. self assignment of new vulnerabilities).
- Responsible for escalation and representation of the ARG on Incident calls related application vulnerabilities, specifically P1s.
- The candidate will be expected to take responsibility for any ARG actions or collaboration, “owning” the issue for ARG.
- Works with CST tech teams to ensure that the SOR remains up to date and functioning correctly.
- Works with CST on enhancements to the SOR.
- Represents ARG on tech calls relating to SOR, providing end user input and validation of break/fix activities.
- Responsible for management of the ARG BAU process for unmasked corporate account details.
- Responsible for creation and maintenance of ARG team official process and procedure documentation, and training documentation.
- Responsible for configuration of the application access package for all new ARG team members in ARM.
- Responsible for creation and QA for monthly risk metrics at manager and board level.
- Responsible for training and onboarding any new members of the ARG team.
Required Qualifications:
- 3+ years cyber security experience.
- Vulnerability and remediation experience.
- Ability to improve team processes to increase efficiency and coverage. This would include maintenance of team documentation and optimizing alignment of vulnerabilities among the team.
- Understanding of novel vulnerability vectors, primarily those aligned to AI capabilities.
This job will be open and accepting applications for a minimum of seven days from the date it was posted.
Shift:
1st shift (United States of America)
Hours Per Week:
40
Job Description:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
Position Summary:
The Application Remediation Governance candidate will contribute to reduction of technology risk in the bank by driving down the time taken to remediate identified application vulnerabilities, working with application managers and risk partners to resolve vulnerabilities in a time frame aligned to the Bank’s risk appetite. The candidate will be at the forefront of the Bank’s response to the new AI-identified application vulnerabilities, working with application teams and driving remediation in a timely manner.
The candidate will attend report out calls following a security assessment of a particular application aligned with an assigned 4 dot hierarchy. Candidate will track the identified vulnerabilities in the system of record and work with the application or vendor manager until resolution. Candidate will update status of vulnerabilities as required in the system of record and will aid the application and/or vendor manager with any technical or process related queries during resolution of the identified vulnerabilities. Additionally, the candidate will be expected to aid with creation of periodic risk metrics relating to the role.
Responsibilities:
- Creates and maintains the team's application vulnerability portfolio.
- Responsible for being at the forefront of the Bank’s response to the novel threat of AI identified vulnerabilities, possession of a good understanding of LLM based vulnerabilities and the most effective and timely actions the team can take to minimize cyber risk to the Bank.
- Oversight and leadership responsibilities for ARG daily BAU activities.
- Leadership of the ARG team, including being proxy manager when required.
- Responsible for maintaining a balanced distribution of vulnerabilities between ARG team members to ensure workload balance.
- Work includes configuration of the SOR for all team members to view their portfolio, specifically alerting them to any items that require timely action (e.g. self assignment of new vulnerabilities).
- Responsible for escalation and representation of the ARG on Incident calls related application vulnerabilities, specifically P1s.
- The candidate will be expected to take responsibility for any ARG actions or collaboration, “owning” the issue for ARG.
- Works with CST tech teams to ensure that the SOR remains up to date and functioning correctly.
- Works with CST on enhancements to the SOR.
- Represents ARG on tech calls relating to SOR, providing end user input and validation of break/fix activities.
- Responsible for management of the ARG BAU process for unmasked corporate account details.
- Responsible for creation and maintenance of ARG team official process and procedure documentation, and training documentation.
- Responsible for configuration of the application access package for all new ARG team members in ARM.
- Responsible for creation and QA for monthly risk metrics at manager and board level.
- Responsible for training and onboarding any new members of the ARG team.
Required Qualifications:
- 3+ years cyber security experience.
- Vulnerability and remediation experience.
- Ability to improve team processes to increase efficiency and coverage. This would include maintenance of team documentation and optimizing alignment of vulnerabilities among the team.
- Understanding of novel vulnerability vectors, primarily those aligned to AI capabilities.
This job will be open and accepting applications for a minimum of seven days from the date it was posted.
Shift:
1st shift (United States of America)
Hours Per Week:
40
See all 717+ Green Card Application Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Green Card Application Security Engineer Jobs.
Get Access To All JobsTips for Finding Green Card Sponsorship as an Application Security Engineer
Match your credentials to EB-2 requirements
EB-2 requires a master's degree or a bachelor's plus five years of progressive experience in a related field. Document your appsec specialization, penetration testing certifications, and any advanced coursework before your employer starts the PERM audit.
Target employers with active PERM filings
Search the DOL's OFLC disclosure data for employers who have previously filed PERM certifications for security engineering titles. Companies with a filing history have established internal processes, meaning your case moves faster than at first-time sponsors.
Find green card sponsors using Migrate Mate
Filter Application Security Engineer roles by green card sponsorship history on Migrate Mate. You'll see which employers have sponsored foreign workers for similar titles, saving weeks of manual research before your first outreach.
Clarify job duties to satisfy PERM specificity
PERM requires your employer to advertise the exact role being sponsored. If your duties span both software development and security, work with HR to draft a job description that reflects the appsec scope accurately, or a misclassified posting risks DOL rejection.
Understand the PERM recruitment window before accepting an offer
Your employer must run a mandatory 30-day DOL recruitment period and then wait 30 days before filing. Confirm this timeline during offer negotiations so your start date, any OPT or H-1B visa expiration, and the PERM filing window align without a gap in authorization.
Request concurrent I-485 filing if your priority date is current
If the Visa Bulletin shows your EB-2 or EB-3 priority date is current at the time your I-140 is approved, ask your employer to file your I-485 adjustment of status concurrently. This can cut months off your wait for a green card.
Green Card Application Security Engineer: Frequently Asked Questions
Does an Application Security Engineer role qualify for EB-2 or EB-3 sponsorship?
Most Application Security Engineer positions qualify for both categories. EB-2 applies when the role requires a master's degree or equivalent experience in a specialized security discipline. EB-3 covers roles requiring at least a bachelor's degree. Your employer chooses the category when filing the PERM labor certification, so the job description's stated minimum requirements are what determines eligibility, not your personal credentials alone.
How is the green card process different from H-1B sponsorship for this role?
H-1B is a temporary status subject to annual cap lotteries and six-year limits. Green card sponsorship through PERM and an I-140 petition leads to permanent residency with no renewal concerns. There is no cap on EB-2 and EB-3 filings themselves, though per-country backlogs can extend wait times for nationals of India and China. The PERM process also requires your employer to run active recruitment, which H-1B does not.
What documentation do I need to support a PERM filing as an Application Security Engineer?
You'll need degree transcripts, any professional certifications like CISSP, CEH, or OSCP, and a detailed employment history showing progressive responsibility in application security. If your foreign degree is not from a U.S. institution, a credential evaluation from a NACES-member organization is typically required. USCIS and DOL both review these records during the I-140 and PERM audit stages.
How do I find employers who actively sponsor green cards for security engineering roles?
Search for Application Security Engineer positions filtered by green card sponsorship on Migrate Mate. The platform surfaces employers with a documented history of PERM filings for similar titles, so you can prioritize outreach to companies that have already navigated the process rather than starting conversations with employers who are unfamiliar with it.
Can my employer start the PERM process while I'm on an H-1B, and will my status be protected?
Yes. Employers can file a PERM labor certification and an I-140 petition while you're in valid H-1B status. Under AC21 portability rules, once your I-140 is approved and your priority date is more than 180 days old, you gain significant flexibility to change employers or roles without losing your place in the green card queue. USCIS administers the I-140 stage after DOL certifies the PERM.