OPT Information Security Engineer Jobs
Information Security Engineer jobs are among the more OPT-friendly roles in tech: employers filing H-1B visa petitions for security engineers do so at high rates, and STEM OPT's 24-month extension applies directly to this field. Most roles require a degree in computer science, cybersecurity, or a related discipline.
Find OPT Information Security Engineer JobsOverview
Showing 5 of 224+ Information Security Engineer jobs
See all 224+ Information Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Engineer roles.
Get Access To All JobsResponsibilities:
- Conduct information security risk assessments across applications, IT infrastructure, business processes, projects, and third-party environments.
- Support the maintenance and updating of the Information Security Risk Register, including risk treatment plans, remediation progress, and supporting documentation.
- Perform third-party security reviews and vendor risk assessments in collaboration with Procurement, Legal, Privacy, and business stakeholders.
- Support the development, review, maintenance, and lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions.
- Collect, validate, maintain, and organize compliance and control evidence to support internal audits, external audits, regulatory inspections, and assurance activities.
- Monitor and track risk remediation plans, coordinating follow-up activities with risk owners, control owners, and cross-functional stakeholders.
- Support information security control assessments and effectiveness reviews to evaluate alignment with internal policies, security standards, and regulatory requirements.
- Maintain Governance, Risk, & Compliance documentation, repositories, risk and compliance metrics, dashboards, and reporting materials to support effective governance and management oversight.
- Assist with preparation of executive-level reporting, governance committee presentations, and risk review documentation to communicate information security risks, control gaps, and remediation progress.
- Identify and implement opportunities to enhance GRC processes through standardization, automation, improved documentation, and repeatable workflows.
Qualifications
- Minimum of 3 years of professional experience in information security, cybersecurity governance, IT risk management, regulatory compliance, audit, or a related discipline.
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business Administration, Risk Management, or a related field.
- Working knowledge of industry-recognized cybersecurity, information security, and risk management frameworks, including NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or comparable standards.
- Experience supporting cybersecurity and IT risk assessments, compliance reviews, internal and external audits, control testing and assurance, third-party risk assessments, and remediation tracking.
- Ability to develop, maintain, and enhance security and risk management documentation, policies, procedures, assessment reports, and stakeholder-ready presentations.
- Relevant industry certifications preferred, including CompTIA Security+, GSEC, SSCP, CISA, CRISC, or equivalent cybersecurity, audit, and risk management certifications.
Here is more information:
Position: Information Security & Compliance Analyst
Term: 12+ month contract
Schedule: Hybrid, 2-3 days per week onsite only Monday-Friday 8am-5pm EST
Location: Boston, MA
Pay: $50-54/hr
Responsibilities:
- Conduct information security risk assessments across applications, IT infrastructure, business processes, projects, and third-party environments.
- Support the maintenance and updating of the Information Security Risk Register, including risk treatment plans, remediation progress, and supporting documentation.
- Perform third-party security reviews and vendor risk assessments in collaboration with Procurement, Legal, Privacy, and business stakeholders.
- Support the development, review, maintenance, and lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions.
- Collect, validate, maintain, and organize compliance and control evidence to support internal audits, external audits, regulatory inspections, and assurance activities.
- Monitor and track risk remediation plans, coordinating follow-up activities with risk owners, control owners, and cross-functional stakeholders.
- Support information security control assessments and effectiveness reviews to evaluate alignment with internal policies, security standards, and regulatory requirements.
- Maintain Governance, Risk, & Compliance documentation, repositories, risk and compliance metrics, dashboards, and reporting materials to support effective governance and management oversight.
- Assist with preparation of executive-level reporting, governance committee presentations, and risk review documentation to communicate information security risks, control gaps, and remediation progress.
- Identify and implement opportunities to enhance GRC processes through standardization, automation, improved documentation, and repeatable workflows.
Qualifications
- Minimum of 3 years of professional experience in information security, cybersecurity governance, IT risk management, regulatory compliance, audit, or a related discipline.
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business Administration, Risk Management, or a related field.
- Working knowledge of industry-recognized cybersecurity, information security, and risk management frameworks, including NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or comparable standards.
- Experience supporting cybersecurity and IT risk assessments, compliance reviews, internal and external audits, control testing and assurance, third-party risk assessments, and remediation tracking.
- Ability to develop, maintain, and enhance security and risk management documentation, policies, procedures, assessment reports, and stakeholder-ready presentations.
- Relevant industry certifications preferred, including CompTIA Security+, GSEC, SSCP, CISA, CRISC, or equivalent cybersecurity, audit, and risk management certifications.
Here is more information:
Position: Information Security & Compliance Analyst
Term: 12+ month contract
Schedule: Hybrid, 2-3 days per week onsite only Monday-Friday 8am-5pm EST
Location: Boston, MA
Pay: $50-54/hr
See all 224+ OPT Information Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Information Security Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an Information Security Engineer
Lead with your clearance eligibility or certifications
Security clearances are hard to come by. If you hold or can obtain a clearance, say so upfront. Certifications like CompTIA Security+, CISSP, or CEH signal technical credibility and reduce employer hesitation about sponsorship investment.
Target companies with established security teams
Large financial institutions, cloud providers, and defense contractors run mature security programs and have dedicated immigration support. These employers sponsor OPT students far more consistently than early-stage startups with no HR infrastructure.
Frame your OPT timeline around the hiring cycle
STEM OPT gives you up to three years of work authorization. Tell employers you have time before H-1B visa is needed. That runway reduces perceived urgency and makes sponsorship conversations feel less pressured during initial interviews.
Demonstrate hands-on experience with specific tools
Generic security knowledge does not stand out. Highlight direct experience with SIEM platforms, vulnerability scanners, or cloud security tooling. Employers sponsoring OPT want engineers who contribute immediately, not candidates who need six months of ramp-up.
Apply before your OPT start date if possible
Starting your job search while still in school gives you more negotiating room. Employers can plan onboarding around your authorized start date, and you avoid the pressure of hunting for roles mid-OPT with a ticking clock.
Research employers' H-1B filing history before applying
Employers who consistently file H-1B petitions for security engineers are your highest-probability targets. USCIS disclosure data shows which companies sponsor this role repeatedly, helping you focus your applications where sponsorship is genuinely on the table.
Information Security Engineer OPT: Frequently Asked Questions
Do Information Security Engineer roles qualify for the STEM OPT extension?
Yes. Information Security Engineering falls under CIP codes tied to computer science and cybersecurity, both of which are on the STEM Designated Degree Program List. That makes you eligible for the 24-month STEM OPT extension, giving you up to three years of total work authorization after graduation, provided your employer enrolls in E-Verify.
How do I find Information Security Engineer jobs that sponsor OPT students?
Migrate Mate filters jobs specifically for F-1 OPT and STEM OPT candidates, so you can browse Information Security Engineer roles posted by employers open to work authorization sponsorship. Searching general job boards returns results without any OPT filter, which wastes time on employers who will not sponsor.
Can I work as a contractor or on a third-party placement as an Information Security Engineer on OPT?
OPT requires that your work be directly related to your degree field, but the employment relationship matters too. Third-party staffing arrangements are permitted under OPT, provided the work genuinely matches your degree. However, contract-to-hire through a staffing agency does not qualify as employer-sponsored H-1B support, which affects your path after OPT ends.
What degree fields qualify an F-1 student to work as an Information Security Engineer on OPT?
Computer science, cybersecurity, information systems, electrical engineering, and software engineering degrees all support an OPT authorization for this role. The job duties must be directly related to your field of study. A marketing or business degree, even with security certifications, would not satisfy the degree-relatedness requirement DSOs and USCIS apply to OPT eligibility.
How does the 60-day unemployment limit affect Information Security Engineer job seekers on OPT?
F-1 students on standard OPT may be unemployed for no more than 90 days total; STEM OPT adds another 60 days, for 150 days cumulative. Information Security Engineer roles often have longer hiring cycles due to background checks and technical interview rounds, so starting your search early is important. Gaps beyond the limit jeopardize your F-1 status.