OPT Cyber Security Architect Jobs
Cyber Security Architect jobs on OPT require employers comfortable with 12-month standard OPT or 24-month STEM OPT extension, since the role falls under CIP code 11.1003 (Computer and Information Systems Security). Most openings are at large tech, finance, and defense contractors with existing visa infrastructure.
Find OPT Cyber Security Architect JobsOverview
Showing 5 of 65+ Cyber Security Architect jobs
See all 65+ Cyber Security Architect Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cyber Security Architect roles.
Get Access To All JobsLocation: Onsite at location listed in posting
About the role
First Horizon Bank is seeking a cyber security professional, that is ready to develop their potential for and support vulnerability management, application security testing, and penetration testing activities across on-prem and cloud environments. You will help secure the software development lifecycle and protect our associates, our clients, and the data that underpins our financial services.
What you’ll do
-
Vulnerability Management:
Execute recurring vulnerability scans, validate and triage findings, and coordinate remediation with platform/engineering teams; assist with tracking SLAs and reporting on risk reduction.
-
Application Security Testing:
Run Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans, review results with developers, and help integrate testing into CI/CD workflows. Apply OWASP Top 10 guidance in collaboration with development teams.
-
Penetration Testing:
Assist with internal web/mobile/API penetration testing and authenticated testing; perform manual verification to reduce false positives and validate risk and impact.
-
Collaboration & Reporting:
Partner with associates across IT, risk, audit, and compliance to align findings and remediation with policies and regulatory expectations. Contribute to clear metrics and dashboards on vulnerabilities and remediation progress.
What you’ll bring (must-have)
- 1–3 years of hands-on experience in one or more of the following: vulnerability management, application security testing (SAST/DAST), or penetration testing for web/mobile/API.
- Working knowledge of the OWASP Top 10 and secure coding fundamentals; ability to explain common issues and remediation approaches to developers.
- Familiarity with the concepts of CI/CD pipelines and integrating security checks into developer workflows.
- Foundational scripting or automation skills to streamline testing and reporting.
- Strong communication and collaboration skills; ability to document findings and work with engineering teams to drive remediation.
Nice to have (not required)
- Exposure to software composition analysis (SCA) and secrets/dependency scanning.
- Experience operating vulnerability scanning platforms and/or AppSec testing tools.
- Cloud security awareness (AWS, Azure, or M365) related to application and vulnerability management workflows.
- Relevant certifications such as Security+, eJPT, eWPT, CEH, or OSCP-in-progress.
- Bachelor’s degree in a related field or equivalent practical experience.
Work style and schedule
- Onsite 5 days per week.
- Participation in an on-call rotation may be requested as you grow in the role.
Why First Horizon Bank
- Protect the trust of our clients by safeguarding critical systems and data in a highly regulated environment.
- Join a collaborative security team focused on measurable outcomes, engineering excellence, and career growth for our associates.
Location: Onsite at location listed in posting
About the role
First Horizon Bank is seeking a cyber security professional, that is ready to develop their potential for and support vulnerability management, application security testing, and penetration testing activities across on-prem and cloud environments. You will help secure the software development lifecycle and protect our associates, our clients, and the data that underpins our financial services.
What you’ll do
-
Vulnerability Management:
Execute recurring vulnerability scans, validate and triage findings, and coordinate remediation with platform/engineering teams; assist with tracking SLAs and reporting on risk reduction.
-
Application Security Testing:
Run Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans, review results with developers, and help integrate testing into CI/CD workflows. Apply OWASP Top 10 guidance in collaboration with development teams.
-
Penetration Testing:
Assist with internal web/mobile/API penetration testing and authenticated testing; perform manual verification to reduce false positives and validate risk and impact.
-
Collaboration & Reporting:
Partner with associates across IT, risk, audit, and compliance to align findings and remediation with policies and regulatory expectations. Contribute to clear metrics and dashboards on vulnerabilities and remediation progress.
What you’ll bring (must-have)
- 1–3 years of hands-on experience in one or more of the following: vulnerability management, application security testing (SAST/DAST), or penetration testing for web/mobile/API.
- Working knowledge of the OWASP Top 10 and secure coding fundamentals; ability to explain common issues and remediation approaches to developers.
- Familiarity with the concepts of CI/CD pipelines and integrating security checks into developer workflows.
- Foundational scripting or automation skills to streamline testing and reporting.
- Strong communication and collaboration skills; ability to document findings and work with engineering teams to drive remediation.
Nice to have (not required)
- Exposure to software composition analysis (SCA) and secrets/dependency scanning.
- Experience operating vulnerability scanning platforms and/or AppSec testing tools.
- Cloud security awareness (AWS, Azure, or M365) related to application and vulnerability management workflows.
- Relevant certifications such as Security+, eJPT, eWPT, CEH, or OSCP-in-progress.
- Bachelor’s degree in a related field or equivalent practical experience.
Work style and schedule
- Onsite 5 days per week.
- Participation in an on-call rotation may be requested as you grow in the role.
Why First Horizon Bank
- Protect the trust of our clients by safeguarding critical systems and data in a highly regulated environment.
- Join a collaborative security team focused on measurable outcomes, engineering excellence, and career growth for our associates.
See all 65+ OPT Cyber Security Architect Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Cyber Security Architect Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship in Cyber Security Architect
Confirm your role qualifies for STEM OPT
Cyber Security Architect falls under CIP code 11.1003, making it STEM OPT-eligible. Confirm your degree matches an approved STEM field before accepting any offer, since your employer must enroll in E-Verify to authorize your 24-month extension.
Target employers with E-Verify enrollment
STEM OPT requires your employer to be enrolled in E-Verify. Large defense contractors, financial institutions, and enterprise tech companies almost always are. Smaller startups often aren't, so verify enrollment before you invest time in their interview process.
Start your STEM OPT extension early
File your STEM OPT extension at least 90 days before your standard OPT expires. USCIS processing can take 3 to 5 months, but your work authorization automatically continues while the application is pending if filed on time.
Get a formal offer letter before filing
Your employer must sign the I-983 Training Plan before you submit your STEM OPT extension. Without a confirmed offer and signed form, USCIS will reject the application. Have HR confirm their E-Verify status and willingness to sign early.
Position yourself for H-1B sponsorship from day one
Cyber Security Architect is a strong H-1B visa profile. Use your OPT period to build employer relationships at companies with H-1B sponsorship history. The April H-1B lottery registration deadline means your employer needs to commit by March of your extension year.
Highlight clearance eligibility if applicable
Many Cyber Security Architect roles at defense contractors require security clearances, which typically limit hiring to U.S. citizens or permanent residents. Focus your search on commercial tech and finance employers where clearance is not required and OPT is welcomed.
Cyber Security Architect OPT: Frequently Asked Questions
Can I work as a Cyber Security Architect on OPT?
Yes, if your degree is in computer science, information security, or a related STEM field, Cyber Security Architect qualifies for both standard 12-month OPT and the 24-month STEM OPT extension. Your employer must enroll in E-Verify for the STEM extension. Most large tech and finance employers already meet this requirement.
Does a Cyber Security Architect role qualify for the STEM OPT extension?
It does, provided your underlying degree falls under an approved STEM CIP code. Information security and computer science degrees (CIP 11.1003, 11.0101, and related codes) are on the STEM OPT designated degree list. Confirm your specific degree program with your DSO before applying, since the qualifying field is your degree, not the job title.
Do Cyber Security Architect employers typically sponsor OPT students?
Sponsorship willingness varies by employer. Large financial institutions, enterprise software companies, and cloud providers frequently sponsor OPT and H-1B for security architecture roles. Defense contractors often require U.S. citizenship or permanent residency for clearance-dependent positions. Migrate Mate filters for OPT-friendly employers so you can focus your applications where authorization is already expected.
What happens to my OPT work authorization if I change employers as a Cyber Security Architect?
Standard OPT allows employer changes without notifying USCIS, but you must report the change to your DSO within 10 days. For STEM OPT, each new employer must be enrolled in E-Verify and sign a new I-983 Training Plan before you begin work. There is no grace period for starting work at a new employer under STEM OPT without a completed I-983.
What security clearance requirements should I be aware of as an OPT student applying for Cyber Security Architect roles?
Many federal contractor and government-adjacent Cyber Security Architect positions require active security clearances, which are generally unavailable to nonimmigrant visa holders including OPT students. Focus on commercial sector roles in finance, healthcare, and technology where clearance is not a prerequisite. These sectors have strong demand for security architects and established processes for sponsoring international candidates through OPT and beyond.