H-1B Visa Senior Security Consultant Jobs
Senior Security Consultant roles qualify as H-1B visa specialty occupations under the information security analyst classification. Employers must file an LCA with DOL and an I-129 petition with USCIS before your start date. Demand is high across financial services, defense contractors, and cloud-native firms with active H-1B visa filing histories.
Find H-1B Visa Senior Security Consultant JobsOverview
Showing 5 of 82+ Senior Security Consultant jobs
See all 82+ Senior Security Consultant Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Senior Security Consultant roles.
Get Access To All JobsINTRODUCTION
Infosys Public Services is seeking a Cyber Security Analyst to join our team.
Summary:
Cyber Security Consultant with strong expertise in Governance, Risk and Compliance (GRC), NIST Risk Management Framework (RMF), Security Assessment and Authorization (SA&A), and Authorization to Operate (ATO) activities within U.S. federal, state, and local government environments. The consultant will assess security posture, conduct security and risk assessments, identify compliance gaps, develop and assess security controls, and support remediation and authorization activities aligned with FISMA, NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FedRAMP, CMMC, and applicable government security and privacy requirements. These frameworks are commonly used across federal agencies, federal systems, cloud services, and government contractors. The role will support creating ATO packages artefacts including - System Security Plans (SSP), Security Procedures, Security design artefacts, security risk assessments, Plans of Action and Milestones (POA&M). The consultant will collaborate with system owners, ISSOs, ISSMs, security architects, cloud and infrastructure teams, auditors/assessors, and government stakeholders to ensure security requirements are effectively implemented and maintained throughout the system lifecycle.
Key Responsibilities:
- Minimum 11 years of cybersecurity experience, with demonstrated experience supporting U.S. federal, state, local government, or regulated public-sector environments.
- Strong experience with NIST RMF, FISMA, Security Assessment and Authorization, ATO processes, NIST SP 800-53, NIST SP 800-171, IRS1075, CJIS, CMS MARS-E, HIPAA/HITECH, FedRAMP, security risk assessments, GRC, cloud security, Zero Trust, vulnerability management, security operations, and incident management.
- NIST describes RMF as encompassing preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Required Skills:
- NIST RMF & ATO: Experience supporting RMF lifecycle activities, security authorization, control assessment, authorization packages, and continuous monitoring.
- FISMA & Federal Compliance: Strong understanding of FISMA and associated NIST standards applicable to federal information systems.
- Security Control Implementation & Assessments: Experience implementing, assessing technical, operational, and management controls related to NIST 800-53, IRS1075, FISMA/FEDRAMP and documenting control effectiveness and deficiencies.
- Security Documentation: Experience developing SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation documents, and authorization artifacts.
- Cloud Security: Experience assessing security configurations and controls across Microsoft Azure, AWS, or other government cloud environments.
- Zero Trust: Experience applying Zero Trust principles across identity, endpoint, network, application, workload, and data security.
- Identity & Access Management (IAM): Experience with Architecture and implementation of IAM solutions, access governance.
- Security Operations: Experience with SIEM/SOAR SOC operations, security monitoring, threat detection, endpoint security, and operational security controls.
- Incident Management: Experience supporting incident triage, investigation, containment, remediation, recovery, reporting, and lessons learned.
- Vulnerability Management: Experience evaluating vulnerabilities, prioritizing risk, coordinating remediation, and maintaining vulnerability and POA&M tracking.
- Continuous Monitoring: Experience supporting ongoing security control monitoring, vulnerability assessment, configuration compliance, and risk reporting.
- Security Architecture: Ability to evaluate cloud, infrastructure, network, application, identity, and data architectures against government security requirements.
- Privacy & Data Protection: Experience supporting privacy assessments and security controls for sensitive government information, PII, and regulated data.
- Stakeholder Management: Ability to collaborate effectively with government stakeholders, System Owners, ISSOs, ISSMs, Authorizing Officials, assessors, auditors, and technical delivery teams.
- Candidate must possess at least 1 of the certifications - CISSP, CISM, CISA, CRISC, CCSP, GIAC, Microsoft Azure Security, or equivalent industry certifications are highly desirable.
Educational Requirements:
A Bachelor’s degree or foreign equivalent is required from an accredited institution. Will consider three years of progressive, relevant work experience instead of every year of education. Candidates who have completed a Master's degree program are strongly preferred.
The job entails sitting and working at a computer for extended periods. Should be able to communicate by telephone, email, or face-to-face. Travel may be required as per the job requirements.
The estimated annual compensation range for this role will be as follows:
In Rockville, MD: $118,776 to $221,065.
INTRODUCTION
Infosys Public Services is seeking a Cyber Security Analyst to join our team.
Summary:
Cyber Security Consultant with strong expertise in Governance, Risk and Compliance (GRC), NIST Risk Management Framework (RMF), Security Assessment and Authorization (SA&A), and Authorization to Operate (ATO) activities within U.S. federal, state, and local government environments. The consultant will assess security posture, conduct security and risk assessments, identify compliance gaps, develop and assess security controls, and support remediation and authorization activities aligned with FISMA, NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FedRAMP, CMMC, and applicable government security and privacy requirements. These frameworks are commonly used across federal agencies, federal systems, cloud services, and government contractors. The role will support creating ATO packages artefacts including - System Security Plans (SSP), Security Procedures, Security design artefacts, security risk assessments, Plans of Action and Milestones (POA&M). The consultant will collaborate with system owners, ISSOs, ISSMs, security architects, cloud and infrastructure teams, auditors/assessors, and government stakeholders to ensure security requirements are effectively implemented and maintained throughout the system lifecycle.
Key Responsibilities:
- Minimum 11 years of cybersecurity experience, with demonstrated experience supporting U.S. federal, state, local government, or regulated public-sector environments.
- Strong experience with NIST RMF, FISMA, Security Assessment and Authorization, ATO processes, NIST SP 800-53, NIST SP 800-171, IRS1075, CJIS, CMS MARS-E, HIPAA/HITECH, FedRAMP, security risk assessments, GRC, cloud security, Zero Trust, vulnerability management, security operations, and incident management.
- NIST describes RMF as encompassing preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Required Skills:
- NIST RMF & ATO: Experience supporting RMF lifecycle activities, security authorization, control assessment, authorization packages, and continuous monitoring.
- FISMA & Federal Compliance: Strong understanding of FISMA and associated NIST standards applicable to federal information systems.
- Security Control Implementation & Assessments: Experience implementing, assessing technical, operational, and management controls related to NIST 800-53, IRS1075, FISMA/FEDRAMP and documenting control effectiveness and deficiencies.
- Security Documentation: Experience developing SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation documents, and authorization artifacts.
- Cloud Security: Experience assessing security configurations and controls across Microsoft Azure, AWS, or other government cloud environments.
- Zero Trust: Experience applying Zero Trust principles across identity, endpoint, network, application, workload, and data security.
- Identity & Access Management (IAM): Experience with Architecture and implementation of IAM solutions, access governance.
- Security Operations: Experience with SIEM/SOAR SOC operations, security monitoring, threat detection, endpoint security, and operational security controls.
- Incident Management: Experience supporting incident triage, investigation, containment, remediation, recovery, reporting, and lessons learned.
- Vulnerability Management: Experience evaluating vulnerabilities, prioritizing risk, coordinating remediation, and maintaining vulnerability and POA&M tracking.
- Continuous Monitoring: Experience supporting ongoing security control monitoring, vulnerability assessment, configuration compliance, and risk reporting.
- Security Architecture: Ability to evaluate cloud, infrastructure, network, application, identity, and data architectures against government security requirements.
- Privacy & Data Protection: Experience supporting privacy assessments and security controls for sensitive government information, PII, and regulated data.
- Stakeholder Management: Ability to collaborate effectively with government stakeholders, System Owners, ISSOs, ISSMs, Authorizing Officials, assessors, auditors, and technical delivery teams.
- Candidate must possess at least 1 of the certifications - CISSP, CISM, CISA, CRISC, CCSP, GIAC, Microsoft Azure Security, or equivalent industry certifications are highly desirable.
Educational Requirements:
A Bachelor’s degree or foreign equivalent is required from an accredited institution. Will consider three years of progressive, relevant work experience instead of every year of education. Candidates who have completed a Master's degree program are strongly preferred.
The job entails sitting and working at a computer for extended periods. Should be able to communicate by telephone, email, or face-to-face. Travel may be required as per the job requirements.
The estimated annual compensation range for this role will be as follows:
In Rockville, MD: $118,776 to $221,065.
See all 82+ H-1B Visa Senior Security Consultant Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Senior Security Consultant Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Senior Security Consultant
Align your credentials to specialty occupation
USCIS requires a direct-match bachelor's degree or higher in computer science, information security, or a related field. Certifications like CISSP or CISM strengthen your case but don't substitute for the degree requirement on the I-129 petition.
Search DOL LCA data before applying
Run the employer name through the OFLC Wage Search to confirm they've filed LCAs for security consultant roles. Prior filings signal an established sponsorship process, which reduces your risk of hitting delays after an offer.
Target firms with cleared-facility hiring pipelines
Defense contractors and federal consulting firms regularly sponsor H-1B holders for security roles. Check whether the position requires a security clearance before applying since clearance eligibility can affect sponsorship timelines and employer willingness.
Use Migrate Mate to filter verified sponsors
Pull up Senior Security Consultant roles on Migrate Mate to see which employers have active H-1B filing histories filtered by occupation code. This cuts out manual DOL database searches and surfaces sponsors you can approach with confidence.
Negotiate offer timing around the H-1B cap
Cap-subject H-1B petitions must be filed in April for an October 1 start. If you receive an offer outside that window, ask whether the employer qualifies as cap-exempt or can structure a cap-exempt interim arrangement to bridge the gap.
Request premium processing before your start date
USCIS premium processing guarantees a decision within 15 business days. For security consultant roles where employers need staffing certainty on sensitive projects, ask your employer to include the premium processing upgrade in the I-129 filing.
H-1B Visa Senior Security Consultant: Frequently Asked Questions
Does a Senior Security Consultant role qualify as an H-1B specialty occupation?
Yes. USCIS classifies information security analyst and security consulting roles as specialty occupations because they normally require at least a bachelor's degree in computer science, information security, cybersecurity, or a closely related field. If the job description lists a generalized degree requirement rather than a field-specific one, your employer's attorney may need to document why the role demands specialized theoretical knowledge.
Which industries sponsor H-1B visas most often for security consultants?
Financial services firms, federal IT contractors, Big Four advisory practices, and cloud infrastructure companies file LCAs for security consultant roles at high volume. You can verify this by reviewing OFLC disclosure data filtered to the information security analyst SOC code. On Migrate Mate, you can browse Senior Security Consultant roles specifically filtered for employers with confirmed H-1B filing histories.
Can my employer sponsor an H-1B if the role involves a federal security clearance?
Yes, but clearance eligibility is separate from H-1B sponsorship. USCIS approves the H-1B based on specialty occupation and prevailing wage, not on clearance status. Some federal contracts restrict access to U.S. persons, which may limit the scope of work you can perform until clearance is granted, so clarify this with the employer before accepting an offer.
What prevailing wage level applies to Senior Security Consultant positions?
Most Senior Security Consultant roles fall at DOL wage Level III or IV, reflecting the supervisory and advanced advisory components of the work. Your employer must certify on the LCA that they'll pay at least the prevailing wage for the relevant SOC code and work location. Cross-check the expected offer against the OFLC Wage Search for the information security analyst category in your metro area to confirm compliance.
What happens to my H-1B status if I move between consulting engagements at different client sites?
H-1B portability rules allow you to remain in valid status while your employer files an amended petition if the new work location is in a different metropolitan statistical area. Your employer must file a new LCA certified for the new worksite before you begin work there. Consulting roles with multi-site deployments require your employer to track these moves carefully to stay compliant with USCIS site-of-employment requirements.