OPT Application Security Engineer Jobs
Application Security Engineer jobs are consistently sponsored on OPT, with employers ranging from fintech and cloud infrastructure firms to enterprise software companies. Most roles require a computer science or cybersecurity degree, making them a strong fit for STEM OPT's 24-month extension. Cap-exempt employers and government contractors frequently hire in this field.
Find OPT Application Security Engineer JobsOverview
Showing 5 of 200+ Application Security Engineer jobs
See all 200+ Application Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Application Security Engineer roles.
Get Access To All JobsINTRODUCTION
Work closely with senior leadership, project managers, and stakeholders to align cybersecurity initiatives with corporate objectives and ensure successful project delivery. Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making.
ROLE AND RESPONSIBILITIES
- Ensure adherence to cybersecurity standards and regulations, providing regular reports on security practices and compliance to stakeholders.
- Oversee the integration of physical security measures with cybersecurity protocols to ensure comprehensive protection and monitoring of our infrastructure.
- Effectively coordinate resources and manage project progress, addressing issues and risks to ensure successful delivery.
- Develop and implement strategies for secure communication protocols to protect sensitive data and ensure the integrity of cybersecurity systems.
- Oversee the operations of the SOC, ensuring it is equipped with the latest tools, technologies, and processes to effectively monitor and respond to security threats.
- Communicate critical security operations risks, strategies, and incident statuses to executive leadership, and prepare detailed performance reports with insights on compliance, effectiveness, and KPIs.
- Develop and implement strategies and governance frameworks for security operations, ensuring alignment with organizational goals and regulatory compliance.
- Mentor a team of cybersecurity professionals within the security operations domain, fostering a culture of excellence and continuous improvement through targeted training and development opportunities.
- Oversee and guide the planning, execution, and delivery of cybersecurity projects and initiatives, ensuring alignment with corporate objectives.
- Design and execute advanced threat detection and incident response protocols, ensuring rapid identification, containment, and remediation of security incidents.
BASIC QUALIFICATIONS
- Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training.
- 3+ Years experience in Cybersecurity engineering.
PREFERRED QUALIFICATIONS
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred.
- 5+ years’ experience in cloud security engineering or related cybersecurity roles.
- Experience designing and implementing cloud security solutions and architectures.
- Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features.
- Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001).
TOP REQUIREMENTS
- Good understanding of application security vulnerabilities across applications developed using multiple programming languages (e.g., Python, Java, JavaScript, and C#), with experience leveraging Python, Java, or PowerShell to develop security automation, integrate security tools, and streamline vulnerability management processes.
NICE TO HAVE
- Airline experience.
INTRODUCTION
Work closely with senior leadership, project managers, and stakeholders to align cybersecurity initiatives with corporate objectives and ensure successful project delivery. Clearly convey project risks and strategies to senior management and stakeholders, ensuring transparency and informed decision-making.
ROLE AND RESPONSIBILITIES
- Ensure adherence to cybersecurity standards and regulations, providing regular reports on security practices and compliance to stakeholders.
- Oversee the integration of physical security measures with cybersecurity protocols to ensure comprehensive protection and monitoring of our infrastructure.
- Effectively coordinate resources and manage project progress, addressing issues and risks to ensure successful delivery.
- Develop and implement strategies for secure communication protocols to protect sensitive data and ensure the integrity of cybersecurity systems.
- Oversee the operations of the SOC, ensuring it is equipped with the latest tools, technologies, and processes to effectively monitor and respond to security threats.
- Communicate critical security operations risks, strategies, and incident statuses to executive leadership, and prepare detailed performance reports with insights on compliance, effectiveness, and KPIs.
- Develop and implement strategies and governance frameworks for security operations, ensuring alignment with organizational goals and regulatory compliance.
- Mentor a team of cybersecurity professionals within the security operations domain, fostering a culture of excellence and continuous improvement through targeted training and development opportunities.
- Oversee and guide the planning, execution, and delivery of cybersecurity projects and initiatives, ensuring alignment with corporate objectives.
- Design and execute advanced threat detection and incident response protocols, ensuring rapid identification, containment, and remediation of security incidents.
BASIC QUALIFICATIONS
- Bachelor's degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training.
- 3+ Years experience in Cybersecurity engineering.
PREFERRED QUALIFICATIONS
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred.
- 5+ years’ experience in cloud security engineering or related cybersecurity roles.
- Experience designing and implementing cloud security solutions and architectures.
- Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features.
- Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001).
TOP REQUIREMENTS
- Good understanding of application security vulnerabilities across applications developed using multiple programming languages (e.g., Python, Java, JavaScript, and C#), with experience leveraging Python, Java, or PowerShell to develop security automation, integrate security tools, and streamline vulnerability management processes.
NICE TO HAVE
- Airline experience.
See all 200+ OPT Application Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Application Security Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an Application Security Engineer
Lead with your security certifications
OSCP, CEH, and Security+ certifications signal hands-on competence to hiring managers faster than a degree alone. OPT students who hold at least one recognized security credential move through technical screenings at a noticeably higher rate in this field.
Target STEM-designated program employers first
Application Security Engineering falls under CIP codes that qualify for the 24-month STEM OPT extension. Prioritize employers already familiar with STEM OPT obligations, since they understand the timeline and are far less likely to withdraw offers over authorization concerns.
Demonstrate experience with specific security frameworks
OWASP Top 10, NIST, and MITRE ATT&CK are referenced in most job descriptions. Calling out specific frameworks you have applied, not just studied, in your resume and cover letter directly addresses what hiring managers are screening for in this role.
Highlight any bug bounty or capture-the-flag experience
Practical proof of skill matters more in security than in most engineering disciplines. Bug bounty reports on HackerOne or CTF placements are legitimate portfolio items that demonstrate offensive and defensive competencies employers cannot easily assess from academic credentials.
Understand your employer's H-1B sponsorship history before applying
Application Security Engineers are in high demand, but sponsorship willingness varies significantly by company size and legal infrastructure. Researching a company's past H-1B visa filings through public OFLC disclosure data helps you prioritize employers likely to support long-term sponsorship after OPT.
Be specific about your OPT start date and STEM extension eligibility
Recruiters in security-sensitive industries need clear authorization timelines upfront. Stating your OPT end date and confirming STEM extension eligibility in your initial outreach eliminates ambiguity and positions you as a candidate who understands their own authorization, which builds recruiter confidence.
Application Security Engineer OPT: Frequently Asked Questions
Is Application Security Engineer a STEM OPT-eligible role?
Yes. Application Security Engineering roles typically fall under CIP codes in computer science and information security, both of which qualify for the 24-month STEM OPT extension. This gives eligible F-1 students up to three years of work authorization in total, making this one of the stronger fields for OPT students pursuing long-term U.S. employment.
Do employers in this field commonly sponsor OPT students?
Yes, particularly at mid-size and large technology companies, financial institutions, and cloud infrastructure firms. Application security is a specialist function with a well-documented talent shortage, which pushes many employers to sponsor candidates they would otherwise pass on. You can browse OPT-friendly Application Security Engineer openings directly on Migrate Mate, where listings are filtered for sponsorship willingness.
Can I work as an Application Security Engineer on OPT if my degree is in computer science rather than cybersecurity?
Yes. USCIS does not require your degree to be in cybersecurity specifically. A computer science, software engineering, or information systems degree is sufficient, provided your coursework or experience connects reasonably to the security function of the role. Most employers in this field regularly hire engineers with general CS backgrounds who have developed security specialization through coursework, certifications, or projects.
What should I do if a job posting says 'U.S. citizens or permanent residents only'?
This restriction almost always reflects government contracting requirements or access to classified systems, not a general sponsorship policy. For commercial application security roles without clearance requirements, most large employers do not impose this restriction. Focus your search on roles at companies without federal contract dependencies, and use Migrate Mate to filter for positions explicitly open to OPT applicants.
How early should I start my Application Security Engineer job search before my OPT start date?
Start at least three to four months before your expected OPT start date. Technical hiring processes in security often include multiple interview rounds, take-home assessments, and background checks that can run four to six weeks from first contact to offer. Beginning early leaves room to negotiate start dates that align with your EAD arrival and reduces the risk of accepting a role under time pressure.