H-1B Visa Security Consultant Jobs
Security Consultant roles qualify for H-1B visa sponsorship as specialty occupations requiring at least a bachelor's degree in information security, computer science, or a related field. Employers file the LCA with DOL and petition USCIS on your behalf, with the annual cap applying unless your employer holds cap-exempt status.
Find H-1B Visa Security Consultant JobsOverview
Showing 5 of 82+ Security Consultant jobs
See all 82+ Security Consultant Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Consultant roles.
Get Access To All JobsINTRODUCTION
Infosys Public Services is seeking a Cyber Security Analyst to join our team.
Summary:
Cyber Security Consultant with strong expertise in Governance, Risk and Compliance (GRC), NIST Risk Management Framework (RMF), Security Assessment and Authorization (SA&A), and Authorization to Operate (ATO) activities within U.S. federal, state, and local government environments. The consultant will assess security posture, conduct security and risk assessments, identify compliance gaps, develop and assess security controls, and support remediation and authorization activities aligned with FISMA, NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FedRAMP, CMMC, and applicable government security and privacy requirements. These frameworks are commonly used across federal agencies, federal systems, cloud services, and government contractors. The role will support creating ATO packages artefacts including - System Security Plans (SSP), Security Procedures, Security design artefacts, security risk assessments, Plans of Action and Milestones (POA&M). The consultant will collaborate with system owners, ISSOs, ISSMs, security architects, cloud and infrastructure teams, auditors/assessors, and government stakeholders to ensure security requirements are effectively implemented and maintained throughout the system lifecycle.
Key Responsibilities:
- Minimum 11 years of cybersecurity experience, with demonstrated experience supporting U.S. federal, state, local government, or regulated public-sector environments.
- Strong experience with NIST RMF, FISMA, Security Assessment and Authorization, ATO processes, NIST SP 800-53, NIST SP 800-171, IRS1075, CJIS, CMS MARS-E, HIPAA/HITECH, FedRAMP, security risk assessments, GRC, cloud security, Zero Trust, vulnerability management, security operations, and incident management.
- NIST describes RMF as encompassing preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Required Skills:
- NIST RMF & ATO: Experience supporting RMF lifecycle activities, security authorization, control assessment, authorization packages, and continuous monitoring.
- FISMA & Federal Compliance: Strong understanding of FISMA and associated NIST standards applicable to federal information systems.
- Security Control Implementation & Assessments: Experience implementing, assessing technical, operational, and management controls related to NIST 800-53, IRS1075, FISMA/FEDRAMP and documenting control effectiveness and deficiencies.
- Security Documentation: Experience developing SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation documents, and authorization artifacts.
- Cloud Security: Experience assessing security configurations and controls across Microsoft Azure, AWS, or other government cloud environments.
- Zero Trust: Experience applying Zero Trust principles across identity, endpoint, network, application, workload, and data security.
- Identity & Access Management (IAM): Experience with Architecture and implementation of IAM solutions, access governance.
- Security Operations: Experience with SIEM/SOAR SOC operations, security monitoring, threat detection, endpoint security, and operational security controls.
- Incident Management: Experience supporting incident triage, investigation, containment, remediation, recovery, reporting, and lessons learned.
- Vulnerability Management: Experience evaluating vulnerabilities, prioritizing risk, coordinating remediation, and maintaining vulnerability and POA&M tracking.
- Continuous Monitoring: Experience supporting ongoing security control monitoring, vulnerability assessment, configuration compliance, and risk reporting.
- Security Architecture: Ability to evaluate cloud, infrastructure, network, application, identity, and data architectures against government security requirements.
- Privacy & Data Protection: Experience supporting privacy assessments and security controls for sensitive government information, PII, and regulated data.
- Stakeholder Management: Ability to collaborate effectively with government stakeholders, System Owners, ISSOs, ISSMs, Authorizing Officials, assessors, auditors, and technical delivery teams.
- Candidate must possess at least 1 of the certifications - CISSP, CISM, CISA, CRISC, CCSP, GIAC, Microsoft Azure Security, or equivalent industry certifications are highly desirable.
Educational Requirements:
A Bachelor’s degree or foreign equivalent is required from an accredited institution. Will consider three years of progressive, relevant work experience instead of every year of education. Candidates who have completed a Master's degree program are strongly preferred.
The job entails sitting and working at a computer for extended periods. Should be able to communicate by telephone, email, or face-to-face. Travel may be required as per the job requirements.
The estimated annual compensation range for this role will be as follows:
In Rockville, MD: $118,776 to $221,065.
INTRODUCTION
Infosys Public Services is seeking a Cyber Security Analyst to join our team.
Summary:
Cyber Security Consultant with strong expertise in Governance, Risk and Compliance (GRC), NIST Risk Management Framework (RMF), Security Assessment and Authorization (SA&A), and Authorization to Operate (ATO) activities within U.S. federal, state, and local government environments. The consultant will assess security posture, conduct security and risk assessments, identify compliance gaps, develop and assess security controls, and support remediation and authorization activities aligned with FISMA, NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FedRAMP, CMMC, and applicable government security and privacy requirements. These frameworks are commonly used across federal agencies, federal systems, cloud services, and government contractors. The role will support creating ATO packages artefacts including - System Security Plans (SSP), Security Procedures, Security design artefacts, security risk assessments, Plans of Action and Milestones (POA&M). The consultant will collaborate with system owners, ISSOs, ISSMs, security architects, cloud and infrastructure teams, auditors/assessors, and government stakeholders to ensure security requirements are effectively implemented and maintained throughout the system lifecycle.
Key Responsibilities:
- Minimum 11 years of cybersecurity experience, with demonstrated experience supporting U.S. federal, state, local government, or regulated public-sector environments.
- Strong experience with NIST RMF, FISMA, Security Assessment and Authorization, ATO processes, NIST SP 800-53, NIST SP 800-171, IRS1075, CJIS, CMS MARS-E, HIPAA/HITECH, FedRAMP, security risk assessments, GRC, cloud security, Zero Trust, vulnerability management, security operations, and incident management.
- NIST describes RMF as encompassing preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Required Skills:
- NIST RMF & ATO: Experience supporting RMF lifecycle activities, security authorization, control assessment, authorization packages, and continuous monitoring.
- FISMA & Federal Compliance: Strong understanding of FISMA and associated NIST standards applicable to federal information systems.
- Security Control Implementation & Assessments: Experience implementing, assessing technical, operational, and management controls related to NIST 800-53, IRS1075, FISMA/FEDRAMP and documenting control effectiveness and deficiencies.
- Security Documentation: Experience developing SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation documents, and authorization artifacts.
- Cloud Security: Experience assessing security configurations and controls across Microsoft Azure, AWS, or other government cloud environments.
- Zero Trust: Experience applying Zero Trust principles across identity, endpoint, network, application, workload, and data security.
- Identity & Access Management (IAM): Experience with Architecture and implementation of IAM solutions, access governance.
- Security Operations: Experience with SIEM/SOAR SOC operations, security monitoring, threat detection, endpoint security, and operational security controls.
- Incident Management: Experience supporting incident triage, investigation, containment, remediation, recovery, reporting, and lessons learned.
- Vulnerability Management: Experience evaluating vulnerabilities, prioritizing risk, coordinating remediation, and maintaining vulnerability and POA&M tracking.
- Continuous Monitoring: Experience supporting ongoing security control monitoring, vulnerability assessment, configuration compliance, and risk reporting.
- Security Architecture: Ability to evaluate cloud, infrastructure, network, application, identity, and data architectures against government security requirements.
- Privacy & Data Protection: Experience supporting privacy assessments and security controls for sensitive government information, PII, and regulated data.
- Stakeholder Management: Ability to collaborate effectively with government stakeholders, System Owners, ISSOs, ISSMs, Authorizing Officials, assessors, auditors, and technical delivery teams.
- Candidate must possess at least 1 of the certifications - CISSP, CISM, CISA, CRISC, CCSP, GIAC, Microsoft Azure Security, or equivalent industry certifications are highly desirable.
Educational Requirements:
A Bachelor’s degree or foreign equivalent is required from an accredited institution. Will consider three years of progressive, relevant work experience instead of every year of education. Candidates who have completed a Master's degree program are strongly preferred.
The job entails sitting and working at a computer for extended periods. Should be able to communicate by telephone, email, or face-to-face. Travel may be required as per the job requirements.
The estimated annual compensation range for this role will be as follows:
In Rockville, MD: $118,776 to $221,065.
See all 82+ H-1B Visa Security Consultant Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Security Consultant Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Security Consultant
Map your degree to the role
USCIS scrutinizes whether your degree field directly relates to security consulting. A computer science or cybersecurity degree strengthens your case. If your degree is in a tangential field, document how your coursework maps to the specialty occupation definition.
Check employer LCA history before applying
Use Migrate Mate to filter Security Consultant roles by verified DOL LCA filing history, so you're applying to employers who have already navigated the H-1B process for this occupation, not ones encountering it for the first time.
Verify the prevailing wage tier your role falls under
Security Consultant positions span wage levels 1 through 4 depending on experience and supervisory duties. Run the OFLC Wage Search before negotiating your offer to confirm your salary meets the certified LCA wage, which USCIS checks against the I-129.
Target cap-exempt employers for immediate sponsorship
Consulting firms contracted to universities or nonprofit research institutions can file H-1B petitions year-round outside the annual cap. If you can't wait for the April lottery, prioritize security roles at these organizations during your job search.
Clarify whether clearance affects your petition timeline
Many Security Consultant roles require a government clearance that takes months to adjudicate. Confirm with your employer whether the H-1B petition will be filed before or after the clearance process, since clearance delays can affect your start date and cap-gap status.
Use O*NET to build your specialty occupation documentation
The O*NET occupation profile for Security Consultants lists the knowledge domains and typical education requirements USCIS evaluates. Reference these when drafting your support letter to align your qualifications with the regulatory specialty occupation standard.
H-1B Visa Security Consultant: Frequently Asked Questions
Does a Security Consultant role qualify as a specialty occupation for H-1B purposes?
Yes, Security Consultant positions typically qualify because they require theoretical and practical application of highly specialized knowledge in cybersecurity, risk management, or information assurance, and a minimum of a bachelor's degree in a directly related field. USCIS evaluates the job description and the employer's actual requirements, so the offer letter must specify the degree field, not just a general preference.
Which types of employers sponsor H-1B visas for Security Consultants?
Federal contractors, management consulting firms, financial institutions, and large technology companies are among the most active H-1B sponsors for Security Consultant roles. Consulting firms with government contracts are especially common because the work itself demands credentialed specialists. You can browse Security Consultant roles by sponsorship history on Migrate Mate to identify which employers have filed LCAs for this occupation.
How does a government security clearance interact with the H-1B petition process?
The H-1B petition and the clearance process run on separate tracks. USCIS approves the petition based on your qualifications and the job requirements, not your clearance status. However, some employers wait until clearance eligibility is confirmed before filing, which can affect when your petition is submitted relative to the cap registration window. Clarify this timeline with your employer before accepting an offer.
Can I switch from one security consulting employer to another on H-1B?
Yes. H-1B portability under AC21 allows you to change employers once your petition has been pending for 180 days or more, provided the new role is in the same or a substantially similar specialty occupation. For Security Consultants, moving between firms doing similar advisory or assessment work generally qualifies. Your new employer files an H-1B transfer petition, and you can start working upon receipt.
What documentation should I prepare to support my H-1B petition as a Security Consultant?
You'll need academic transcripts and your degree certificate, a detailed offer letter specifying the degree requirement for the role, and professional certifications such as CISSP, CISM, or CEH if your employer lists them as requirements. If your degree field isn't an exact match for the role, a credentials evaluation and a letter from your employer explaining the educational requirement helps address potential USCIS requests for evidence.