OPT Security Engineer Jobs
Security Engineer roles are among the most actively sponsored positions for OPT students, particularly in tech, finance, and defense contracting. Your 12-month OPT window (or 24-month STEM extension with a qualifying degree in computer science or cybersecurity) gives you real runway to land a role and transition to H-1B visa sponsorship.
Find OPT Security Engineer JobsOverview
Showing 5 of 497+ Security Engineer jobs
See all 497+ Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Engineer roles.
Get Access To All JobsLocation: Onsite at location listed in posting
About the role
First Horizon Bank is seeking a cyber security professional, that is ready to develop their potential for and support vulnerability management, application security testing, and penetration testing activities across on-prem and cloud environments. You will help secure the software development lifecycle and protect our associates, our clients, and the data that underpins our financial services.
What you’ll do
-
Vulnerability Management:
Execute recurring vulnerability scans, validate and triage findings, and coordinate remediation with platform/engineering teams; assist with tracking SLAs and reporting on risk reduction.
-
Application Security Testing:
Run Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans, review results with developers, and help integrate testing into CI/CD workflows. Apply OWASP Top 10 guidance in collaboration with development teams.
-
Penetration Testing:
Assist with internal web/mobile/API penetration testing and authenticated testing; perform manual verification to reduce false positives and validate risk and impact.
-
Collaboration & Reporting:
Partner with associates across IT, risk, audit, and compliance to align findings and remediation with policies and regulatory expectations. Contribute to clear metrics and dashboards on vulnerabilities and remediation progress.
What you’ll bring (must-have)
- 1–3 years of hands-on experience in one or more of the following: vulnerability management, application security testing (SAST/DAST), or penetration testing for web/mobile/API.
- Working knowledge of the OWASP Top 10 and secure coding fundamentals; ability to explain common issues and remediation approaches to developers.
- Familiarity with the concepts of CI/CD pipelines and integrating security checks into developer workflows.
- Foundational scripting or automation skills to streamline testing and reporting.
- Strong communication and collaboration skills; ability to document findings and work with engineering teams to drive remediation.
Nice to have (not required)
- Exposure to software composition analysis (SCA) and secrets/dependency scanning.
- Experience operating vulnerability scanning platforms and/or AppSec testing tools.
- Cloud security awareness (AWS, Azure, or M365) related to application and vulnerability management workflows.
- Relevant certifications such as Security+, eJPT, eWPT, CEH, or OSCP-in-progress.
- Bachelor’s degree in a related field or equivalent practical experience.
Work style and schedule
- Onsite 5 days per week.
- Participation in an on-call rotation may be requested as you grow in the role.
Why First Horizon Bank
- Protect the trust of our clients by safeguarding critical systems and data in a highly regulated environment.
- Join a collaborative security team focused on measurable outcomes, engineering excellence, and career growth for our associates.
Location: Onsite at location listed in posting
About the role
First Horizon Bank is seeking a cyber security professional, that is ready to develop their potential for and support vulnerability management, application security testing, and penetration testing activities across on-prem and cloud environments. You will help secure the software development lifecycle and protect our associates, our clients, and the data that underpins our financial services.
What you’ll do
-
Vulnerability Management:
Execute recurring vulnerability scans, validate and triage findings, and coordinate remediation with platform/engineering teams; assist with tracking SLAs and reporting on risk reduction.
-
Application Security Testing:
Run Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans, review results with developers, and help integrate testing into CI/CD workflows. Apply OWASP Top 10 guidance in collaboration with development teams.
-
Penetration Testing:
Assist with internal web/mobile/API penetration testing and authenticated testing; perform manual verification to reduce false positives and validate risk and impact.
-
Collaboration & Reporting:
Partner with associates across IT, risk, audit, and compliance to align findings and remediation with policies and regulatory expectations. Contribute to clear metrics and dashboards on vulnerabilities and remediation progress.
What you’ll bring (must-have)
- 1–3 years of hands-on experience in one or more of the following: vulnerability management, application security testing (SAST/DAST), or penetration testing for web/mobile/API.
- Working knowledge of the OWASP Top 10 and secure coding fundamentals; ability to explain common issues and remediation approaches to developers.
- Familiarity with the concepts of CI/CD pipelines and integrating security checks into developer workflows.
- Foundational scripting or automation skills to streamline testing and reporting.
- Strong communication and collaboration skills; ability to document findings and work with engineering teams to drive remediation.
Nice to have (not required)
- Exposure to software composition analysis (SCA) and secrets/dependency scanning.
- Experience operating vulnerability scanning platforms and/or AppSec testing tools.
- Cloud security awareness (AWS, Azure, or M365) related to application and vulnerability management workflows.
- Relevant certifications such as Security+, eJPT, eWPT, CEH, or OSCP-in-progress.
- Bachelor’s degree in a related field or equivalent practical experience.
Work style and schedule
- Onsite 5 days per week.
- Participation in an on-call rotation may be requested as you grow in the role.
Why First Horizon Bank
- Protect the trust of our clients by safeguarding critical systems and data in a highly regulated environment.
- Join a collaborative security team focused on measurable outcomes, engineering excellence, and career growth for our associates.
See all 497+ OPT Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Security Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as a Security Engineer
Target STEM OPT-eligible degree fields
Cybersecurity, computer science, and information assurance degrees qualify for the 24-month STEM OPT extension. Confirm your degree's CIP code with your DSO before applying, since this directly affects how long you can work without H-1B visa status.
Focus on employers with active H-1B filing histories
Companies that regularly sponsor H-1B visas for security roles are your best bet for OPT conversion. Look for employers who have sponsored similar titles like Information Security Engineer or Cybersecurity Analyst in recent years, not just this year.
Pursue certifications that reduce employer hesitation
Certifications like CompTIA Security+, CISSP, or CEH signal job-ready skills to employers unfamiliar with OPT. They reduce perceived hiring risk and make it easier for smaller teams without dedicated HR to justify sponsoring an international candidate.
Address clearance requirements early in your search
Many federal and defense-adjacent security roles require U.S. security clearances, which OPT students are generally ineligible to obtain. Filter for roles that explicitly state clearance is not required, and clarify this in screening calls before investing time.
Communicate your OPT timeline proactively
Recruiters often conflate OPT with visa sponsorship. Clarify that you're already authorized to work and that H-1B sponsorship would only be needed after your OPT period ends, typically at least 12 to 36 months away depending on your extension status.
Use Migrate Mate to find OPT-friendly security roles
Migrate Mate surfaces Security Engineer jobs posted by employers with documented sponsorship histories. Browsing there lets you focus your energy on companies already comfortable hiring international candidates, rather than cold-applying and filtering manually.
Security Engineer OPT: Frequently Asked Questions
Can I work as a Security Engineer on OPT without additional work authorization?
Yes. OPT grants you 12 months of work authorization directly tied to your degree field. If your degree is in computer science, cybersecurity, or a related STEM field, you're also eligible for a 24-month extension, giving you up to three years to work as a Security Engineer before needing H-1B or another visa.
Do Security Engineer roles qualify for the STEM OPT extension?
Most do, but it depends on your degree, not your job title. Your degree's CIP code must appear on the DHS STEM Designated Degree Program List. Degrees in computer science, information security, and cybersecurity almost always qualify. Confirm your specific CIP code with your DSO before applying for the extension, since the job title itself doesn't determine eligibility.
Can I work for a defense contractor or government agency as a Security Engineer on OPT?
Civilian contractor roles that don't require a security clearance are generally open to OPT students. However, roles requiring a U.S. security clearance are typically off-limits, since clearances are generally unavailable to non-U.S. citizens and non-permanent residents. Always check the clearance requirement in the job description before applying, and ask directly during screening if it's unclear.
How do I find Security Engineer employers who are open to sponsoring OPT students?
Migrate Mate is built specifically for this. It aggregates Security Engineer job listings from employers with verified sponsorship histories, so you can identify companies already comfortable hiring on OPT and planning for H-1B conversion. Filtering by sponsorship track record saves significant time compared to researching each employer manually.
What happens to my OPT status if my Security Engineer job ends?
You're allowed up to 90 days of unemployment during your standard OPT period, and up to 150 days during the STEM extension. If you exceed those limits without securing a new role, your OPT authorization terminates and you fall out of status. Track your unemployment days carefully and prioritize finding a new position well before hitting the threshold.