H-1B Visa Network Security Analyst Jobs
Network Security Analyst roles qualify as H-1B visa specialty occupations under USCIS guidelines, requiring at least a bachelor's degree in cybersecurity, computer science, or a related field. Employers in finance, healthcare, defense contracting, and tech consistently file LCAs for this role, making it one of the more reliably sponsored positions in the security field.
Find H-1B Visa Network Security Analyst JobsOverview
Showing 5 of 54+ Network Security Analyst jobs
See all 54+ Network Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Network Security Analyst roles.
Get Access To All JobsINTRODUCTION
SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security controls across on-premises, cloud, and hybrid environments. This position owns or supports major network security platforms and capabilities, including firewalls, segmentation, VPNs, secure cloud connectivity, intrusion prevention, and network security telemetry.
The Senior Network Security Engineer collaborates with Network Operations, Cloud Operations, Security Operations, infrastructure, application, and development teams to provide secure and resilient connectivity across the enterprise. The role requires strong hands-on experience with Palo Alto Networks and Cisco firewalls, enterprise routing, AWS and Microsoft Azure networking, production change control, and complex incident resolution.
Why you’ll love this role:
This role is ideal for an experienced network security professional who enjoys solving complex technical challenges and shaping secure, resilient enterprise connectivity. You will have the opportunity to own critical security platforms, influence hybrid-cloud architecture, lead major changes and incident resolution, mentor technical team members, and strengthen security across SWBC’s enterprise environment.
ESSENTIAL DUTIES INCLUDE THE FOLLOWING:
- Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
- Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access-control policies.
- Design and implement network segmentation, micro-segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.
- Perform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.
- Develop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.
- Design, implement, and troubleshoot remote-access VPN solutions and site-to-site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.
- Establish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third-party organizations.
- Design, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.
- Apply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.
- Design and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.
- Evaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.
- Configure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident-response workflows.
- Serve as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root-cause analysis and corrective actions.
- Participate in the defined on-call rotation and support major technical escalations.
- Support compliance and audit activities by maintaining controls, producing audit-ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.
- Own assigned network security platforms or major subsystems throughout their operational lifecycle.
- Plan, sponsor, present, test, validate, implement, and review non-trivial production changes through established change-control processes, including appropriate rollback plans.
- Coordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.
- Support disaster recovery planning and testing for assigned network security platforms and services.
- Use operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.
- Maintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.
- Collaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.
- Mentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.
- Communicate complex technical and security concepts effectively to technical and non-technical stakeholders.
- Support Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.
- Perform all other duties as assigned.
MINIMUM QUALIFICATIONS
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
- Minimum of seven (7) years of experience in network engineering, network security, cloud network security, infrastructure security, or a combination of these areas.
- Extensive experience designing, implementing, securing, and supporting enterprise network environments.
- Extensive hands-on experience with Palo Alto Networks firewalls and hands-on experience with Cisco firewalls, including Cisco ASA or Cisco Secure Firewall/FTD.
- Strong experience with remote-access VPN and site-to-site IPsec VPN technologies.
- Strong understanding of enterprise routing concepts, including BGP and OSPF.
- Hands-on experience with routing, network security, and hybrid connectivity in AWS and Microsoft Azure.
- Strong knowledge of TCP/IP, VLANs, subnetting, NAT, network segmentation, DNS, DHCP, defense-in-depth, and network security architecture.
- Experience implementing production changes through formal change-control processes, including testing, validation, rollback planning, and documentation.
- Demonstrated ability to troubleshoot and resolve complex technical incidents beyond established runbooks and contribute to root-cause analysis, corrective actions, vulnerability remediation, and recurrence reduction.
- Experience creating technical standards, architecture diagrams, implementation procedures, automation, or design documentation.
- Knowledge of IDS/IPS, firewall logging, network security monitoring, SIEM integration, and related telemetry.
- Familiarity with infrastructure-as-code and automation technologies such as Terraform, CloudFormation, Ansible, Python, or PowerShell.
- Working knowledge of security standards and control frameworks applicable to network and cloud security.
- Strong analytical, troubleshooting, documentation, problem-solving, written communication, and verbal communication skills.
- Ability to work independently and collaboratively in a fast-paced, evolving environment and participate in defined on-call responsibilities as a senior technical resolver.
- Current Cisco CCNP, preferably CCNP Enterprise or an equivalent certification, or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
- AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect – Professional, a relevant Microsoft Azure network or security certification, CISSP, or an equivalent advanced security certification is preferred.
- Experience working in financial services or another regulated industry is preferred.
SWBC OFFERS:
- Competitive overall compensation package
- Work/Life balance
- Employee engagement activities and recognition awards
- Years of Service awards
- Career enhancement and growth opportunities
- Leadership Academy and Mentor Program
- Continuing education and career certifications
- Variety of healthcare coverage options
- Traditional and Roth 401(k) retirement plans
- Lucrative Wellness Program
Based upon employee eligibility
ADDITIONAL INFORMATION:
SWBC is a Substance-Free Workplace and requires pre-employment drug testing.
Please note, SWBC does not hire tobacco users as allowed by law.
INTRODUCTION
SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security controls across on-premises, cloud, and hybrid environments. This position owns or supports major network security platforms and capabilities, including firewalls, segmentation, VPNs, secure cloud connectivity, intrusion prevention, and network security telemetry.
The Senior Network Security Engineer collaborates with Network Operations, Cloud Operations, Security Operations, infrastructure, application, and development teams to provide secure and resilient connectivity across the enterprise. The role requires strong hands-on experience with Palo Alto Networks and Cisco firewalls, enterprise routing, AWS and Microsoft Azure networking, production change control, and complex incident resolution.
Why you’ll love this role:
This role is ideal for an experienced network security professional who enjoys solving complex technical challenges and shaping secure, resilient enterprise connectivity. You will have the opportunity to own critical security platforms, influence hybrid-cloud architecture, lead major changes and incident resolution, mentor technical team members, and strengthen security across SWBC’s enterprise environment.
ESSENTIAL DUTIES INCLUDE THE FOLLOWING:
- Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
- Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access-control policies.
- Design and implement network segmentation, micro-segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.
- Perform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.
- Develop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.
- Design, implement, and troubleshoot remote-access VPN solutions and site-to-site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.
- Establish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third-party organizations.
- Design, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.
- Apply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.
- Design and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.
- Evaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.
- Configure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident-response workflows.
- Serve as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root-cause analysis and corrective actions.
- Participate in the defined on-call rotation and support major technical escalations.
- Support compliance and audit activities by maintaining controls, producing audit-ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.
- Own assigned network security platforms or major subsystems throughout their operational lifecycle.
- Plan, sponsor, present, test, validate, implement, and review non-trivial production changes through established change-control processes, including appropriate rollback plans.
- Coordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.
- Support disaster recovery planning and testing for assigned network security platforms and services.
- Use operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.
- Maintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.
- Collaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.
- Mentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.
- Communicate complex technical and security concepts effectively to technical and non-technical stakeholders.
- Support Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.
- Perform all other duties as assigned.
MINIMUM QUALIFICATIONS
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
- Minimum of seven (7) years of experience in network engineering, network security, cloud network security, infrastructure security, or a combination of these areas.
- Extensive experience designing, implementing, securing, and supporting enterprise network environments.
- Extensive hands-on experience with Palo Alto Networks firewalls and hands-on experience with Cisco firewalls, including Cisco ASA or Cisco Secure Firewall/FTD.
- Strong experience with remote-access VPN and site-to-site IPsec VPN technologies.
- Strong understanding of enterprise routing concepts, including BGP and OSPF.
- Hands-on experience with routing, network security, and hybrid connectivity in AWS and Microsoft Azure.
- Strong knowledge of TCP/IP, VLANs, subnetting, NAT, network segmentation, DNS, DHCP, defense-in-depth, and network security architecture.
- Experience implementing production changes through formal change-control processes, including testing, validation, rollback planning, and documentation.
- Demonstrated ability to troubleshoot and resolve complex technical incidents beyond established runbooks and contribute to root-cause analysis, corrective actions, vulnerability remediation, and recurrence reduction.
- Experience creating technical standards, architecture diagrams, implementation procedures, automation, or design documentation.
- Knowledge of IDS/IPS, firewall logging, network security monitoring, SIEM integration, and related telemetry.
- Familiarity with infrastructure-as-code and automation technologies such as Terraform, CloudFormation, Ansible, Python, or PowerShell.
- Working knowledge of security standards and control frameworks applicable to network and cloud security.
- Strong analytical, troubleshooting, documentation, problem-solving, written communication, and verbal communication skills.
- Ability to work independently and collaboratively in a fast-paced, evolving environment and participate in defined on-call responsibilities as a senior technical resolver.
- Current Cisco CCNP, preferably CCNP Enterprise or an equivalent certification, or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
- AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect – Professional, a relevant Microsoft Azure network or security certification, CISSP, or an equivalent advanced security certification is preferred.
- Experience working in financial services or another regulated industry is preferred.
SWBC OFFERS:
- Competitive overall compensation package
- Work/Life balance
- Employee engagement activities and recognition awards
- Years of Service awards
- Career enhancement and growth opportunities
- Leadership Academy and Mentor Program
- Continuing education and career certifications
- Variety of healthcare coverage options
- Traditional and Roth 401(k) retirement plans
- Lucrative Wellness Program
Based upon employee eligibility
ADDITIONAL INFORMATION:
SWBC is a Substance-Free Workplace and requires pre-employment drug testing.
Please note, SWBC does not hire tobacco users as allowed by law.
See all 54+ H-1B Visa Network Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Network Security Analyst Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Network Security Analyst
Document your security certifications strategically
USCIS scrutinizes whether your degree directly relates to the role. Certifications like CISSP, CEH, or Security+ don't substitute for a qualifying degree, but they strengthen your specialty occupation argument when your degree is adjacent, such as general IT or engineering.
Target employers with active LCA filing history
Use Migrate Mate to filter Network Security Analyst roles by employers who have filed LCAs for this specific occupation code, not just general IT roles. Prior filing history signals familiarity with the H-1B process and a lower risk of a withdrawn offer.
Check prevailing wage before negotiating your offer
Your employer must pay the higher of the actual or prevailing wage for your location and role. Use the OFLC Wage Search to look up Level II and III wages for SOC code 15-1212 before you negotiate, so your offer clears the DOL threshold from the start.
Clarify clearance requirements early in interviews
Many defense and government-contractor Network Security Analyst roles require a security clearance, which H-1B holders from certain countries can't obtain. Ask about clearance requirements before you reach the offer stage to avoid investing time in a role that can't proceed.
Understand cap-exempt employer options
Universities, nonprofit research institutions, and some government-affiliated entities are cap-exempt, letting you start work without waiting for the October 1 start date. If you're on OPT expiring mid-cycle, targeting cap-exempt employers can bridge a gap the lottery timeline can't.
Align your job duties with the O*NET profile
When your employer drafts your H-1B petition, the job duties description should map closely to the O*NET occupation profile for Network and Computer Systems Administrators and Security Analysts. Gaps between your actual duties and the standard profile are a common trigger for USCIS Requests for Evidence.
H-1B Visa Network Security Analyst: Frequently Asked Questions
Does a Network Security Analyst role qualify as a specialty occupation for H-1B purposes?
Yes, Network Security Analyst positions qualify as specialty occupations under USCIS standards because they typically require at least a bachelor's degree in cybersecurity, computer science, information systems, or a closely related field. Your employer must document that the specific role requires that theoretical and practical application of specialized knowledge, so the job description needs to reflect duties that genuinely demand a degree-level background.
How do I find employers who actively sponsor H-1B visas for Network Security Analyst roles?
Search on Migrate Mate, which surfaces employers with verified LCA filing history specifically for security and IT analyst roles. Employers in financial services, healthcare systems, federal contractors, and large technology firms file the most LCAs for this occupation. Focusing on organizations already familiar with the H-1B process significantly reduces the chance of a withdrawn offer after selection.
Can I work as a Network Security Analyst on OPT while waiting for H-1B approval?
Yes, if your OPT EAD is valid and your role qualifies under your degree field, you can work while your H-1B petition is pending. If your degree is in a STEM field such as computer science, cybersecurity, or electrical engineering, you may qualify for a 24-month STEM OPT extension, which provides additional runway beyond the standard 12-month OPT period while you navigate the H-1B cap cycle.
What happens to my H-1B status if my employer is acquired or my security team is restructured?
Under AC21 portability rules, if your H-1B petition has been pending for 180 days or more and you move to a same or similar occupation, your case can port to a new employer without restarting the process. Network Security Analyst roles typically port well to adjacent titles like Information Security Engineer or Cybersecurity Specialist, but your new employer must file an H-1B transfer petition before your current status expires.
Does holding a security clearance affect my H-1B application as a Network Security Analyst?
A security clearance is not a USCIS requirement for the H-1B visa itself, but it is a practical issue at the employer level. Many federal contractor and defense-sector Network Security Analyst roles require clearances that H-1B holders from certain countries cannot obtain due to foreign national restrictions. Confirming clearance requirements during the interview process avoids situations where an offer is extended and then withdrawn after the sponsorship process begins.