H-1B Visa Product Security Engineer Jobs
Product Security Engineer roles qualify for H-1B visa sponsorship as specialty occupations requiring at least a bachelor's degree in computer science, cybersecurity, or a related field. Employers in tech, finance, healthcare, and defense regularly file H-1B petitions for this role, and the 85,000-slot annual cap means timing your job search around the April lottery window matters.
Find H-1B Visa Product Security Engineer JobsOverview
Showing 5 of 59+ Product Security Engineer jobs
See all 59+ Product Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Product Security Engineer roles.
Get Access To All JobsReady to be a Titan?
At ServiceTitan, we are transforming product security into a core part of how engineering delivers software. We are looking for a Staff Product Security Engineer to embed with one of our engineering portfolios and own its security outcomes end to end, across application security and cloud security, so that our 80 plus R&D teams build securely by default without slowing down innovation.
In this role, you will sit alongside engineering leaders in planning and design, threat model systems before they are built, own the portfolio's risk picture, and bring secure-by-default patterns to each team's architecture and workflow. You will be the security expert engineers know by name and the voice that carries their real-world context back into the program's strategy. This is an opportunity to shape how security is practiced where software actually gets built, turning security into an enabler of engineering velocity rather than a constraint.
Design Partnership
- Standing Seat in Planning and Design: Join the portfolio's planning and design cadences as a permanent participant. Review roadmaps, architecture proposals, and technical designs early enough to shape them rather than gate them.
- Threat Modeling: Lead and scale threat modeling across the portfolio using the program's standard and tooling. Prioritize top-tier systems, coach squads to run their own models, and make sure identified threats become tracked requirements in the findings flow.
- Architecture Review: Provide secure architecture guidance for cloud-native services, microservices, multi-tenant data access, identity and secrets handling, and AI-enabled features. Translate the program's security requirements into concrete design decisions the squads can implement.
Portfolio Risk Ownership
- Own the Risk Picture: Maintain a current, evidence-backed view of the portfolio's security risk across application findings, cloud posture, identity, and data exposure. Know what each squad builds, the data it touches, and where it is heading.
- Drive Priorities with Engineering Leaders: Partner directly with the portfolio VP and their leaders to set remediation priorities, negotiate tradeoffs, and drive adherence to vulnerability remediation SLAs. Bring the data, own the follow through, and escalate with judgment.
- Risk Acceptance and Exceptions: Guide squads through the program's risk acceptance process. Make sure exceptions are documented, time-bound, and visible to the right decision makers.
Paved-Road Adoption
- Fit Central Patterns to Local Architecture: Take the paved roads built by the Platform and Programs team, including secure service templates, secrets management patterns, secure cloud configuration templates, CI/CD guardrails, and IaC policy sets, and adapt them to each squad's stack and workflow.
- Drive Adoption in the Field: Get squads onto SAST, SCA, secrets scanning, IaC scanning, container scanning, and CSPM coverage, and keep them there. Tune signal quality with squads so findings are actionable, and close the loop on what is noise versus real risk.
- Hands-On Remediation Support: Read the code, review the Terraform, and pair with engineers on fixes for the hard findings. Write reference implementations and fixes when that is the fastest way to unblock a squad.
Champion Coaching
- Develop the Portfolio's Champions: Recruit, coach, and support the security champions across your squads. Be the technical expert they bring the hard questions to, and build them into the portfolio's first line of security response.
- Contextual Enablement: Deliver just-in-time training, design reviews, and office hours tuned to what the portfolio is actually building. Help squads learn to fix their own code and configuration.
Strategy Feedback
- Feed the Program Roadmap: Bring real engineering context back to the Director and the Platform and Programs team. Identify where central tooling, patterns, or standards fall short of what squads need, and shape what gets built next.
- Metrics and Reporting: Contribute portfolio-level data to the program's metrics rhythm. Report on coverage, remediation velocity, and risk trends for your portfolio to security and engineering leadership.
- Incident Support: Support triage and investigation of security incidents touching your portfolio, and turn lessons learned into design changes and paved-road improvements.
What you'll bring
- Experience: 7-10+ years in product security, application security, cloud security, or a closely related security engineering role, with a strong software engineering foundation. Prior experience embedded with or partnering directly with engineering teams is strongly preferred.
- Breadth Across AppSec and CloudSec: Demonstrated ability to work across the full stack of a modern SaaS product: secure code review, threat modeling, secure design, CI/CD and supply chain security, cloud identity and least privilege, IaC security, container and Kubernetes security, and cloud posture management. You do not need to be the deepest specialist in every area, but you must be credible in all of them.
- Coding and Cloud Fluency: Proficiency reading and writing code in C#/.NET (preferred), Go, Java, or Python, and hands-on experience with Azure and/or AWS security services and IaC tooling such as Terraform or Bicep. You can review a pull request and a Terraform module with equal comfort.
- Threat Modeling and Secure Design: Track record of leading threat modeling and architecture review at scale, and of turning the results into requirements engineering teams actually deliver.
- Influence Without Authority: Proven ability to build trust with VP level engineering leaders and senior engineers, drive priorities through partnership rather than mandate, and hold the line on risk when it matters.
- Automation Mindset: Preference for building repeatable patterns over one-off fixes. Comfortable scripting and automating security tasks, and comfortable using AI-assisted tooling to scale your own work.
- AI Forward: Familiarity with securing AI-enabled features and AI coding agents, and with the emerging risks around non-human identities, MCP integrations, and data exposure in AI systems.
- Certifications: CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, OSCP, or similar are a plus, not a requirement.
Why this role?
Be in the Room: Most security engineers review what has already been decided. You will sit in portfolio planning and design as a standing member and shape what gets built before it is built.
Own a Portfolio, Not a Queue: You are accountable for the security posture of a defined set of squads and a named engineering leaders. Your success is measured in risk reduced, remediation velocity, and paved-road adoption across that portfolio, not in tickets closed.
Full-Stack Security Scope: This role deliberately spans application and cloud security. You will work across code, pipelines, identity, infrastructure, data, and AI systems, backed by specialists on the central team when you need depth.
Shape How Security Is Practiced: You will help define what embedded security partnership looks like at ServiceTitan, from how you engage with engineering leaders to how field learnings become platform patterns that scale across every team.
High Ownership, High Leverage: You will have the autonomy to identify problems, design solutions, and drive them to completion with your portfolio, and the backing of a central team that turns what you learn into patterns for everyone.
Be Human With Us:
Being human isn’t about checking every box on a list. It’s about the experiences we have, people we meet, and the perspectives we share. So, if you have the skills but are hesitant to apply because of your background, apply anyway. We need amazing people like you to help us challenge the conventional and think differently about the problems that we’re solving. We’re in this together. Come be human, with us.
Use of AI Technology:
We use technology, including automated and AI-assisted tools, to support certain aspects of our recruitment process. These tools are designed to improve efficiency and enhance the candidate experience. AI tools are not used to make hiring decisions; all hiring decisions are made by our hiring teams.
What We Offer:
When you join our team, you’re not just accepting a job. You’re making a career move. Here’s how we’ll support you in doing some of the most impactful work of your career:
- Flextime, recognition, and support for autonomous work: Flexible time off with ample learning and development opportunities to continue growing your career. We offer a comprehensive onboarding program, leadership training for Titans at all levels, and other programs and events. Great work is rewarded through Bonusly, peer-nominated awards, and more.
- Holistic health and wellness benefits: Company-paid medical, dental, and vision (with 100% employer paid options and 90% coverage for dependents), FSA and HSA, 401k match, and telehealth options including memberships to One Medical.
- Support for Titans at all stages of life: Parental leave and support, up to $20k in fertility services (i.e. IUI and IVF), surrogacy, and adoption reimbursement, on demand maternity support through Maven Maternity, free breast milk shipping through Maven Milk, pet insurance, legal advisory services, financial planning tools, and more.
At ServiceTitan, we celebrate individuality and uniqueness. We believe that the convergence of fresh perspectives and experiences from all walks of life is what makes our product and culture so great. We strongly encourage people from underrepresented groups to apply. We do not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.
ServiceTitan is committed to fair and equitable compensation for all of our employees. We thoughtfully consider a wide range of factors when determining individual compensation, which may change over time. We comply with all applicable minimum wage laws. For candidates in the United States, the good faith salary ranges estimate for this role is Zone 1: $179,900 USD - $269,900 USD Applicable for: CA, CT, DC, MD, MA, NJ, NY, VA, and WA Zone 2: $168,200 USD - $252,200 USD Applicable for: All other US locations. International Compensation for candidates residing outside the United States will vary by location and will be discussed during the hiring process. Actual compensation within a range is determined by factors including relevant experience, skill set, qualifications, and performance. In addition to base salary, our total compensation package includes an annual bonus, equity, and a holistic suite of benefits.
Ready to be a Titan?
At ServiceTitan, we are transforming product security into a core part of how engineering delivers software. We are looking for a Staff Product Security Engineer to embed with one of our engineering portfolios and own its security outcomes end to end, across application security and cloud security, so that our 80 plus R&D teams build securely by default without slowing down innovation.
In this role, you will sit alongside engineering leaders in planning and design, threat model systems before they are built, own the portfolio's risk picture, and bring secure-by-default patterns to each team's architecture and workflow. You will be the security expert engineers know by name and the voice that carries their real-world context back into the program's strategy. This is an opportunity to shape how security is practiced where software actually gets built, turning security into an enabler of engineering velocity rather than a constraint.
Design Partnership
- Standing Seat in Planning and Design: Join the portfolio's planning and design cadences as a permanent participant. Review roadmaps, architecture proposals, and technical designs early enough to shape them rather than gate them.
- Threat Modeling: Lead and scale threat modeling across the portfolio using the program's standard and tooling. Prioritize top-tier systems, coach squads to run their own models, and make sure identified threats become tracked requirements in the findings flow.
- Architecture Review: Provide secure architecture guidance for cloud-native services, microservices, multi-tenant data access, identity and secrets handling, and AI-enabled features. Translate the program's security requirements into concrete design decisions the squads can implement.
Portfolio Risk Ownership
- Own the Risk Picture: Maintain a current, evidence-backed view of the portfolio's security risk across application findings, cloud posture, identity, and data exposure. Know what each squad builds, the data it touches, and where it is heading.
- Drive Priorities with Engineering Leaders: Partner directly with the portfolio VP and their leaders to set remediation priorities, negotiate tradeoffs, and drive adherence to vulnerability remediation SLAs. Bring the data, own the follow through, and escalate with judgment.
- Risk Acceptance and Exceptions: Guide squads through the program's risk acceptance process. Make sure exceptions are documented, time-bound, and visible to the right decision makers.
Paved-Road Adoption
- Fit Central Patterns to Local Architecture: Take the paved roads built by the Platform and Programs team, including secure service templates, secrets management patterns, secure cloud configuration templates, CI/CD guardrails, and IaC policy sets, and adapt them to each squad's stack and workflow.
- Drive Adoption in the Field: Get squads onto SAST, SCA, secrets scanning, IaC scanning, container scanning, and CSPM coverage, and keep them there. Tune signal quality with squads so findings are actionable, and close the loop on what is noise versus real risk.
- Hands-On Remediation Support: Read the code, review the Terraform, and pair with engineers on fixes for the hard findings. Write reference implementations and fixes when that is the fastest way to unblock a squad.
Champion Coaching
- Develop the Portfolio's Champions: Recruit, coach, and support the security champions across your squads. Be the technical expert they bring the hard questions to, and build them into the portfolio's first line of security response.
- Contextual Enablement: Deliver just-in-time training, design reviews, and office hours tuned to what the portfolio is actually building. Help squads learn to fix their own code and configuration.
Strategy Feedback
- Feed the Program Roadmap: Bring real engineering context back to the Director and the Platform and Programs team. Identify where central tooling, patterns, or standards fall short of what squads need, and shape what gets built next.
- Metrics and Reporting: Contribute portfolio-level data to the program's metrics rhythm. Report on coverage, remediation velocity, and risk trends for your portfolio to security and engineering leadership.
- Incident Support: Support triage and investigation of security incidents touching your portfolio, and turn lessons learned into design changes and paved-road improvements.
What you'll bring
- Experience: 7-10+ years in product security, application security, cloud security, or a closely related security engineering role, with a strong software engineering foundation. Prior experience embedded with or partnering directly with engineering teams is strongly preferred.
- Breadth Across AppSec and CloudSec: Demonstrated ability to work across the full stack of a modern SaaS product: secure code review, threat modeling, secure design, CI/CD and supply chain security, cloud identity and least privilege, IaC security, container and Kubernetes security, and cloud posture management. You do not need to be the deepest specialist in every area, but you must be credible in all of them.
- Coding and Cloud Fluency: Proficiency reading and writing code in C#/.NET (preferred), Go, Java, or Python, and hands-on experience with Azure and/or AWS security services and IaC tooling such as Terraform or Bicep. You can review a pull request and a Terraform module with equal comfort.
- Threat Modeling and Secure Design: Track record of leading threat modeling and architecture review at scale, and of turning the results into requirements engineering teams actually deliver.
- Influence Without Authority: Proven ability to build trust with VP level engineering leaders and senior engineers, drive priorities through partnership rather than mandate, and hold the line on risk when it matters.
- Automation Mindset: Preference for building repeatable patterns over one-off fixes. Comfortable scripting and automating security tasks, and comfortable using AI-assisted tooling to scale your own work.
- AI Forward: Familiarity with securing AI-enabled features and AI coding agents, and with the emerging risks around non-human identities, MCP integrations, and data exposure in AI systems.
- Certifications: CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, OSCP, or similar are a plus, not a requirement.
Why this role?
Be in the Room: Most security engineers review what has already been decided. You will sit in portfolio planning and design as a standing member and shape what gets built before it is built.
Own a Portfolio, Not a Queue: You are accountable for the security posture of a defined set of squads and a named engineering leaders. Your success is measured in risk reduced, remediation velocity, and paved-road adoption across that portfolio, not in tickets closed.
Full-Stack Security Scope: This role deliberately spans application and cloud security. You will work across code, pipelines, identity, infrastructure, data, and AI systems, backed by specialists on the central team when you need depth.
Shape How Security Is Practiced: You will help define what embedded security partnership looks like at ServiceTitan, from how you engage with engineering leaders to how field learnings become platform patterns that scale across every team.
High Ownership, High Leverage: You will have the autonomy to identify problems, design solutions, and drive them to completion with your portfolio, and the backing of a central team that turns what you learn into patterns for everyone.
Be Human With Us:
Being human isn’t about checking every box on a list. It’s about the experiences we have, people we meet, and the perspectives we share. So, if you have the skills but are hesitant to apply because of your background, apply anyway. We need amazing people like you to help us challenge the conventional and think differently about the problems that we’re solving. We’re in this together. Come be human, with us.
Use of AI Technology:
We use technology, including automated and AI-assisted tools, to support certain aspects of our recruitment process. These tools are designed to improve efficiency and enhance the candidate experience. AI tools are not used to make hiring decisions; all hiring decisions are made by our hiring teams.
What We Offer:
When you join our team, you’re not just accepting a job. You’re making a career move. Here’s how we’ll support you in doing some of the most impactful work of your career:
- Flextime, recognition, and support for autonomous work: Flexible time off with ample learning and development opportunities to continue growing your career. We offer a comprehensive onboarding program, leadership training for Titans at all levels, and other programs and events. Great work is rewarded through Bonusly, peer-nominated awards, and more.
- Holistic health and wellness benefits: Company-paid medical, dental, and vision (with 100% employer paid options and 90% coverage for dependents), FSA and HSA, 401k match, and telehealth options including memberships to One Medical.
- Support for Titans at all stages of life: Parental leave and support, up to $20k in fertility services (i.e. IUI and IVF), surrogacy, and adoption reimbursement, on demand maternity support through Maven Maternity, free breast milk shipping through Maven Milk, pet insurance, legal advisory services, financial planning tools, and more.
At ServiceTitan, we celebrate individuality and uniqueness. We believe that the convergence of fresh perspectives and experiences from all walks of life is what makes our product and culture so great. We strongly encourage people from underrepresented groups to apply. We do not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.
ServiceTitan is committed to fair and equitable compensation for all of our employees. We thoughtfully consider a wide range of factors when determining individual compensation, which may change over time. We comply with all applicable minimum wage laws. For candidates in the United States, the good faith salary ranges estimate for this role is Zone 1: $179,900 USD - $269,900 USD Applicable for: CA, CT, DC, MD, MA, NJ, NY, VA, and WA Zone 2: $168,200 USD - $252,200 USD Applicable for: All other US locations. International Compensation for candidates residing outside the United States will vary by location and will be discussed during the hiring process. Actual compensation within a range is determined by factors including relevant experience, skill set, qualifications, and performance. In addition to base salary, our total compensation package includes an annual bonus, equity, and a holistic suite of benefits.
See all 59+ H-1B Visa Product Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Product Security Engineer Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Product Security Engineer
Align your degree to SOC codes
Product Security Engineer roles map to multiple SOC codes depending on the employer's LCA filing. Check O*NET to confirm your degree field aligns with the specialty occupation definition USCIS uses, so you can address any credential mismatch before interviews begin.
Target cap-exempt employers early
Universities, nonprofit research institutions, and government-affiliated entities are exempt from the H-1B cap. Product security roles exist at these organizations, and a cap-exempt petition can be filed at any time of year, bypassing the April lottery entirely.
Search verified H-1B sponsors on Migrate Mate
Filter by employers with confirmed H-1B LCA filings for security engineering roles on Migrate Mate. This shows you which companies have an active sponsorship track record, so you're not discovering a company's reluctance to file after the offer stage.
Request prevailing wage documentation upfront
Ask your prospective employer which wage level they intend to certify on your LCA. Use the OFLC Wage Search to verify the prevailing wage for your location and SOC code before accepting an offer, since the certified wage binds the employer for the petition's duration.
Document security certifications for RFE defense
USCIS sometimes issues Requests for Evidence on specialty occupation grounds for security roles with broad job descriptions. Gather official transcripts, CISSP or CEH certificates, and a detailed duties letter from your employer before the I-129 is filed to preempt this.
Plan your timeline around the 60-day grace period
If you're between H-1B employers, you have a 60-day grace period after your last day to secure a new approved petition or change status. Identify your next employer and initiate the transfer before your final paycheck, not after, to stay within this window.
H-1B Visa Product Security Engineer: Frequently Asked Questions
Does a Product Security Engineer role qualify as a specialty occupation for H-1B purposes?
Yes. Product security engineering requires theoretical and practical application of highly specialized knowledge, typically in computer science, information security, or software engineering, which satisfies USCIS's specialty occupation definition. Your employer's job description must specify that a bachelor's degree or higher in a directly related field is a minimum requirement, not merely preferred.
Which industries hire Product Security Engineers on H-1B sponsorship most consistently?
Technology companies, financial services firms, healthcare technology platforms, defense contractors, and cloud infrastructure providers file H-1B petitions for product security roles regularly. Cap-exempt employers, including research universities and nonprofit think tanks with cybersecurity programs, are also active. You can filter by employer type and LCA filing history on Migrate Mate to identify consistent sponsors.
Can I transfer my H-1B to a new Product Security Engineer employer without losing my status?
Yes, through H-1B portability under AC21. Once your I-129 petition has been pending for 180 days or more and your new employer files a transfer petition, you can begin working for the new employer immediately upon filing. You don't need to wait for approval, but you must be maintaining valid H-1B status at the time of transfer.
How does the H-1B lottery affect my job search timeline for Product Security Engineer roles?
USCIS accepts H-1B cap-subject registrations in March each year for an October 1 start date. If you're on OPT or another status, you need a job offer before your employer can register you. Missing the March window means waiting a full year for the next cycle, so targeting employers early in the calendar year is practical for cap-subject candidates.
What should I check before accepting an offer from an H-1B sponsor for this role?
Verify the employer has filed LCA petitions for roles at your experience level, not just entry-level positions. Confirm they'll cover the H-1B filing fees required by law, including the I-129 and ACWIA training fees, which they cannot legally pass to you. Check that the offered salary meets or exceeds the prevailing wage for your SOC code and location using the OFLC Wage Search.