OPT IT Security Engineer Jobs
IT Security Engineer jobs are among the more OPT-friendly roles in tech because employers filing H-1B visa sponsorships for security engineers consistently rank among the highest in USCIS data. Your 12-month OPT period (or 24-month STEM extension if your degree is in computer science, information security, or a related CIP-designated field) gives you a realistic runway to secure sponsorship.
See All OPT IT Security Engineer JobsOverview
Showing 5 of 129+ IT Security Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 129+ IT Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new IT Security Engineer roles.
Get Access To All JobsINTRODUCTION
Take Your Corporate Career to the Next Level
Kleinfelder, a Forbes' Top Employer for Engineers in North America, is committed to a people-first culture, technical excellence, and creating opportunities where employees can thrive!
Are you ready to be challenged, make a difference, and experience professional growth in your career? Kleinfelder’s Corporate Services team is looking for you! From Accounting & Finance, Human Resources, Marketing & Communications, and Information Technology to Legal and Health & Safety, our corporate employees are part of the Kleinfelder ecosystem – supporting the projects that improve the communities we work and live in.
ROLE AND RESPONSIBILITIES
Step into Your New Role
In this highly visible, fast-paced, and challenging position, you will collaborate with a multidisciplinary team of dedicated IT professionals. You will have the opportunity to work with cutting-edge security solutions. Our security team is responsible for designing, implementing, managing, and monitoring the overall security posture of the organization. We partner with teams across the company to continually optimize our security posture while maintaining a hyper focus on the reliability and stability of our business environments.
Responsibilities:
- Partners Security Manager to create and maintain security architecture strategy road map.
- Develops and implements security tools to assist in detection, prevention, and analysis of security threats.
- Acts as the subject matter expert for Kleinfelder's identity access management program for both internal and external identities as well as design, implement, and support IAM best practice configurations.
- Partner with DevOps and engineering teams to embed security controls into CI/CD pipelines and application architectures, ensuring secure‑by‑design implementations throughout the Software Development Lifecycle (SDLC).
- Manages Kleinfelder's vulnerability management program and partners with other IT members to discover/remediate system vulnerabilities, documents results, and provides recommendations to minimize risks.
- Acts as technical leader for the implementation of security projects that require compliance with customer and corporate policies and standards.
- Represent security during the change advisory board (CAB) and software approval board to review and approve changes in software, hardware, facilities, telecommunications, and user needs.
- Monitors, tunes, and responds to Security Information Event Management (SIEM) security incidents, e.g., system compromise loss of confidentiality, authentication problems, etc.
- Conducts internal and external security audits, 3rd party risk assessments and security analyses to align with compliance standards.
- Documents, maintains, and updates cybersecurity policies and procedures working closely with other internal IT stakeholders.
- Recommends and installs upgrades to security controls to mitigate risks.
- Researches and evaluates new security technology, techniques, and industry best practices to minimize threats and vulnerabilities.
- Assist with day-to-day cybersecurity responsibilities including managing the spam mailbox, security awareness training, and security incident tickets.
- Support internal audits and customer assessments to identify risks and determine mitigation actions.
- Understands and participates in incident response, including steps to minimize the impact and conduct technical and forensic investigations.
- Generates monthly security reports which demonstrate overall security maturity.
BASIC QUALIFICATIONS
Required Skill/Experience:
- Bachelor's degree or equivalent experience
- 7+ years of progressive information security experience supporting enterprise environments.
- 5+ years of hands‑on experience designing, implementing, and supporting Active Directory and Azure Active Directory, including multi‑factor authentication (MFA), single sign‑on (SSO), conditional access policies, and password security controls.
- 3+ years of experience supporting security operations, including incident response, investigation, and remediation through a ticketing or helpdesk system.
- 3+ years’ experience working with DevOps and engineering teams to integrate security into the Software Development Lifecycle (SDLC) rather than performing after‑deployment reviews.
- 2+ years of experience leading or contributing to technical security initiatives, collaborating across multiple departments and external IT vendors to drive security improvements.
- Hands‑on experience implementing security controls within CI/CD pipelines (e.g., Azure DevOps or Git‑based workflows), including secure build, deployment, and change management practices.
- Experience designing, reviewing, or securing Infrastructure as Code (IaC) deployments (e.g., ARM, Bicep, Terraform), with a focus on preventing misconfiguration and enforcing guardrails prior to deployment.
- Experience supporting or securing API‑based solutions, including systems using Azure API Management (APIM) for authentication, authorization, and traffic control.
- Experience securing Microsoft Power Platform solutions, including Power Apps, Power Automate, and Dataverse, with an understanding of environment security, access controls, and data protection models.
- Strong experience conducting third‑party/vendor risk assessments, with the ability to clearly communicate technical risks and remediation options to IT and engineering staff.
- Experience managing, configuring, and supporting Microsoft advanced threat protection and security monitoring technologies.
- Working knowledge of Microsoft Information Protection, including sensitivity labels, data classification, and Microsoft Compliance Center configurations.
- Ability to translate security requirements into clear, actionable technical guidance for engineers and IT teams, supporting risk‑based decision‑making.
- Excellent organizational and communication skills.
- Must be a team player, flexible and willing to undertake a wide variety of challenging tasks.
- Able to work independently with guidance and direction as appropriate.
Following an offer, candidates will be required to satisfactorily complete employment reference checks, verification of professional licensure and/or educational credentials, a motor vehicle report (MVR), and a comprehensive background check.
BENEFITS
Kleinfelder, and its’ subsidiaries and affiliates, offers an excellent compensation and benefits package, including: medical, dental, vision, life insurance, 401(k) plan, and paid holidays.
The expected salary range for the position is displayed in accordance with the California Pay Transparency Law. Final agreed upon compensation is based upon individual qualifications and experience. Salary Range: $75,850-$126,585
CAREER DEVELOPMENT
We are committed to investing in the professional development of our staff, offering each employee every opportunity to grow, develop, and take control of their career paths. We support these efforts through reimbursements for continuing education as well as many of the expenses associated with trainings and certifications, and opportunities for career development through our internal Mentoring Program.
EQUAL OPPORTUNITY
Kleinfelder, and its’ subsidiaries and affiliates, is an Equal Opportunity Employer – Minorities/Women/Disabled/Veterans. (Compliant with the new VEVRAA and Section 503 rules)
NOTICE TO THIRD PARTY AGENCIES
Please note that Kleinfelder, and its’ subsidiaries and affiliates, does not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed Recruitment Fee Agreement, Kleinfelder, and its’ subsidiaries and affiliates, will not consider or agree to payment for any referral compensation or recruiter fee. In the event a recruiter or agency submits a resume or candidate without a previously signed agreement, Kleinfelder, and its’ subsidiaries and affiliates, explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resume, including those submitted to hiring managers, are deemed to be the property of Kleinfelder.
INTRODUCTION
Take Your Corporate Career to the Next Level
Kleinfelder, a Forbes' Top Employer for Engineers in North America, is committed to a people-first culture, technical excellence, and creating opportunities where employees can thrive!
Are you ready to be challenged, make a difference, and experience professional growth in your career? Kleinfelder’s Corporate Services team is looking for you! From Accounting & Finance, Human Resources, Marketing & Communications, and Information Technology to Legal and Health & Safety, our corporate employees are part of the Kleinfelder ecosystem – supporting the projects that improve the communities we work and live in.
ROLE AND RESPONSIBILITIES
Step into Your New Role
In this highly visible, fast-paced, and challenging position, you will collaborate with a multidisciplinary team of dedicated IT professionals. You will have the opportunity to work with cutting-edge security solutions. Our security team is responsible for designing, implementing, managing, and monitoring the overall security posture of the organization. We partner with teams across the company to continually optimize our security posture while maintaining a hyper focus on the reliability and stability of our business environments.
Responsibilities:
- Partners Security Manager to create and maintain security architecture strategy road map.
- Develops and implements security tools to assist in detection, prevention, and analysis of security threats.
- Acts as the subject matter expert for Kleinfelder's identity access management program for both internal and external identities as well as design, implement, and support IAM best practice configurations.
- Partner with DevOps and engineering teams to embed security controls into CI/CD pipelines and application architectures, ensuring secure‑by‑design implementations throughout the Software Development Lifecycle (SDLC).
- Manages Kleinfelder's vulnerability management program and partners with other IT members to discover/remediate system vulnerabilities, documents results, and provides recommendations to minimize risks.
- Acts as technical leader for the implementation of security projects that require compliance with customer and corporate policies and standards.
- Represent security during the change advisory board (CAB) and software approval board to review and approve changes in software, hardware, facilities, telecommunications, and user needs.
- Monitors, tunes, and responds to Security Information Event Management (SIEM) security incidents, e.g., system compromise loss of confidentiality, authentication problems, etc.
- Conducts internal and external security audits, 3rd party risk assessments and security analyses to align with compliance standards.
- Documents, maintains, and updates cybersecurity policies and procedures working closely with other internal IT stakeholders.
- Recommends and installs upgrades to security controls to mitigate risks.
- Researches and evaluates new security technology, techniques, and industry best practices to minimize threats and vulnerabilities.
- Assist with day-to-day cybersecurity responsibilities including managing the spam mailbox, security awareness training, and security incident tickets.
- Support internal audits and customer assessments to identify risks and determine mitigation actions.
- Understands and participates in incident response, including steps to minimize the impact and conduct technical and forensic investigations.
- Generates monthly security reports which demonstrate overall security maturity.
BASIC QUALIFICATIONS
Required Skill/Experience:
- Bachelor's degree or equivalent experience
- 7+ years of progressive information security experience supporting enterprise environments.
- 5+ years of hands‑on experience designing, implementing, and supporting Active Directory and Azure Active Directory, including multi‑factor authentication (MFA), single sign‑on (SSO), conditional access policies, and password security controls.
- 3+ years of experience supporting security operations, including incident response, investigation, and remediation through a ticketing or helpdesk system.
- 3+ years’ experience working with DevOps and engineering teams to integrate security into the Software Development Lifecycle (SDLC) rather than performing after‑deployment reviews.
- 2+ years of experience leading or contributing to technical security initiatives, collaborating across multiple departments and external IT vendors to drive security improvements.
- Hands‑on experience implementing security controls within CI/CD pipelines (e.g., Azure DevOps or Git‑based workflows), including secure build, deployment, and change management practices.
- Experience designing, reviewing, or securing Infrastructure as Code (IaC) deployments (e.g., ARM, Bicep, Terraform), with a focus on preventing misconfiguration and enforcing guardrails prior to deployment.
- Experience supporting or securing API‑based solutions, including systems using Azure API Management (APIM) for authentication, authorization, and traffic control.
- Experience securing Microsoft Power Platform solutions, including Power Apps, Power Automate, and Dataverse, with an understanding of environment security, access controls, and data protection models.
- Strong experience conducting third‑party/vendor risk assessments, with the ability to clearly communicate technical risks and remediation options to IT and engineering staff.
- Experience managing, configuring, and supporting Microsoft advanced threat protection and security monitoring technologies.
- Working knowledge of Microsoft Information Protection, including sensitivity labels, data classification, and Microsoft Compliance Center configurations.
- Ability to translate security requirements into clear, actionable technical guidance for engineers and IT teams, supporting risk‑based decision‑making.
- Excellent organizational and communication skills.
- Must be a team player, flexible and willing to undertake a wide variety of challenging tasks.
- Able to work independently with guidance and direction as appropriate.
Following an offer, candidates will be required to satisfactorily complete employment reference checks, verification of professional licensure and/or educational credentials, a motor vehicle report (MVR), and a comprehensive background check.
BENEFITS
Kleinfelder, and its’ subsidiaries and affiliates, offers an excellent compensation and benefits package, including: medical, dental, vision, life insurance, 401(k) plan, and paid holidays.
The expected salary range for the position is displayed in accordance with the California Pay Transparency Law. Final agreed upon compensation is based upon individual qualifications and experience. Salary Range: $75,850-$126,585
CAREER DEVELOPMENT
We are committed to investing in the professional development of our staff, offering each employee every opportunity to grow, develop, and take control of their career paths. We support these efforts through reimbursements for continuing education as well as many of the expenses associated with trainings and certifications, and opportunities for career development through our internal Mentoring Program.
EQUAL OPPORTUNITY
Kleinfelder, and its’ subsidiaries and affiliates, is an Equal Opportunity Employer – Minorities/Women/Disabled/Veterans. (Compliant with the new VEVRAA and Section 503 rules)
NOTICE TO THIRD PARTY AGENCIES
Please note that Kleinfelder, and its’ subsidiaries and affiliates, does not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed Recruitment Fee Agreement, Kleinfelder, and its’ subsidiaries and affiliates, will not consider or agree to payment for any referral compensation or recruiter fee. In the event a recruiter or agency submits a resume or candidate without a previously signed agreement, Kleinfelder, and its’ subsidiaries and affiliates, explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resume, including those submitted to hiring managers, are deemed to be the property of Kleinfelder.
See all 129+ OPT IT Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT IT Security Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an IT Security Engineer
Target companies with active security clearance programs
Defense contractors and federal IT vendors like Booz Allen Hamilton and Leidos sponsor heavily for security engineers. These employers have established immigration pipelines and are accustomed to navigating OPT timelines alongside clearance investigation processes.
Lead with certifications employers actually care about
CISSP, Security+, CEH, and OSCP signal technical credibility faster than a resume summary can. Hiring managers in security roles use certifications as a first filter, so front-loading them on your resume increases the odds of getting past automated screening.
Apply before your OPT start date if possible
Security engineering hiring cycles often run six to ten weeks. Starting your search two to three months before OPT begins gives employers enough runway to hire you before authorization lapses and gives you buffer time if an offer requires background verification.
Be explicit about your STEM OPT extension eligibility
If your degree qualifies, tell employers upfront that your work authorization extends to 36 months total. This materially changes the sponsorship calculus for many hiring managers who would otherwise pass on OPT candidates with only 12 months remaining.
Focus on employers who have previously sponsored security roles
Past H-1B visa filings for IT Security Engineer or Information Security Analyst job titles are publicly searchable through DOL disclosure data. Targeting employers with a demonstrated sponsorship history dramatically increases your chance of a positive response.
Tailor your application to the specific security domain
Cloud security, application security, SOC analysis, and penetration testing are treated as distinct specializations by many employers. Aligning your resume keywords and cover letter to the exact domain in the job posting improves both ATS performance and interview relevance.
IT Security Engineer OPT: Frequently Asked Questions
Can I work as an IT Security Engineer on OPT?
Yes, as long as your job is directly related to your degree field. IT Security Engineer roles typically qualify under computer science, information technology, cybersecurity, and related CIP-designated programs. Your DSO can confirm whether your specific degree and the role description are sufficiently related before you accept an offer.
Does an IT Security Engineer role qualify for the STEM OPT extension?
It depends on your degree, not the job title. If your bachelor's, master's, or doctoral degree is in a STEM-designated field such as computer science, information security, or electrical engineering, and your employer enrolls in the E-Verify program, you can apply for the 24-month STEM extension. The role itself does not need to be certified separately.
How do I find IT Security Engineer jobs that sponsor OPT students?
Migrate Mate is built specifically for F-1 OPT students and surfaces IT Security Engineer roles from employers with verified sponsorship histories. Rather than filtering through thousands of listings that never respond to OPT candidates, Migrate Mate focuses your search on employers who are genuinely open to work authorization support.
What should I tell employers about my OPT status when applying for security roles?
Be straightforward and include your OPT end date and STEM extension eligibility in your application or first communication. For security-sensitive roles, employers also appreciate knowing upfront that OPT does not conflict with most clearance eligibility determinations, since clearance suitability is assessed independently of immigration status.
Are IT Security Engineer jobs harder to get on OPT than other tech roles?
Not inherently. Demand for security engineers is consistently high and the talent pool is smaller than for software development roles, which works in your favor. The main friction point is that some roles with federal government clients have citizenship requirements. Filtering for private-sector or commercial employers largely removes that constraint.