OPT Security Software Engineer Jobs
Security Software Engineer roles are among the most consistently sponsored positions in tech, making them a strong fit for F-1 OPT students. Employers filing H-1B visa and O-1 visa petitions for this role typically require a degree in computer science, cybersecurity, or a related field. STEM OPT extension eligibility gives you up to three years of work authorization to build your candidacy.
Find OPT Security Software Engineer JobsOverview
Showing 5 of 17+ Security Software Engineer jobs
See all Security Software Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Software Engineer roles.
Get Access To All JobsJob Description
We are seeking a Security Software Engineer to build and harden software systems supporting DoD programs operating under CMMC/NIST 800-171/FedRAMP compliance requirements. You will embed security across the SDLC—from design and code review through CI/CD and cloud deployment—working alongside engineering, DevSecOps, and IT teams in a regulated, cloud-native environment (AWS Commercial and GovCloud, Azure GCC High).
Responsibilities
- Core Engineering & Secure Development
- Design and develop secure software with a security-first mindset baked into every phase of the SDLC.
- Apply secure coding standards, threat modeling, and vulnerability mitigation aligned to NIST 800-53 and CMMC Level 2/3 controls.
- Conduct architecture reviews and code hardening to address OWASP Top 10 and DoD STIGs.
-
Automate security gates in CI/CD pipelines (SAST, DAST, dependency scanning, secrets detection).
-
Security Architecture & Controls
- Design secure system and API architectures for multi-tenant cloud environments, including GCC High and FedRAMP-authorized platforms.
- Implement IAM controls, JIT provisioning, SSO/SAML/OIDC flows, and least-privilege authorization frameworks (e.g., Cognito, Azure AD).
-
Instrument applications with security logging and monitoring that satisfies audit and continuous monitoring requirements (AU/SI control families).
-
Vulnerability Management & Response
- Lead code reviews, SAST/DAST scans, and targeted penetration testing; document findings against control frameworks.
- Triage and remediate vulnerabilities within POA&M timelines; maintain artifact evidence for compliance assessments.
-
Support incident response for application-layer events; contribute to after-action reports and corrective action plans.
-
Cross-functional Collaboration
- Serve as the embedded security champion for engineering squads, raising the security bar through mentorship and code review culture.
- Develop and deliver security training and runbooks tailored to engineering and DevOps team members.
- Collaborate with DevOps/SRE to enforce secure IaC, WAF rules, network controls, and runtime monitoring across AWS and Azure environments.
Required Qualifications
- Bachelor’s degree in Computer Science, Engineering, or related field—or equivalent experience.
- 3+ years of software engineering experience with a strong focus on security.
- Proficiency in one or more programming languages (e.g., JavaScript/TypeScript, Python, Go, C#).
- Experience with secure coding practices and frameworks.
- Strong understanding of application security principles, including:
- OWASP Top 10
- Secure API/REST design
- Cryptography fundamentals
- Authentication/authorization patterns
- Experience with code scanning tools (SAST/DAST), threat modeling, and penetration testing.
- Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements and evidence collection.
- Hands-on experience with AWS and/or Azure security services (IAM, WAF, Security Hub, Defender, Sentinel); GCC High or GovCloud experience a plus.
Preferred Qualifications
- Experience with container security (Docker, ECS).
- Working knowledge of Zero Trust Architecture principles.
- Experience building DevSecOps pipelines in regulated environments; familiarity with tools like Prisma, Checkov, Snyk, or Aqua.
- Relevant certifications (any of the following):
- CISSP, CSSLP, or CASP+
- OSCP
- CEH
- GIAC (GWAPT, GSEC, GWEB) or CCP/CCA (UK Cyber Essentials equivalent)
- Experience securing microservices or event-driven architectures on ECS; background in federal or cleared environments preferred.
Job Description
We are seeking a Security Software Engineer to build and harden software systems supporting DoD programs operating under CMMC/NIST 800-171/FedRAMP compliance requirements. You will embed security across the SDLC—from design and code review through CI/CD and cloud deployment—working alongside engineering, DevSecOps, and IT teams in a regulated, cloud-native environment (AWS Commercial and GovCloud, Azure GCC High).
Responsibilities
- Core Engineering & Secure Development
- Design and develop secure software with a security-first mindset baked into every phase of the SDLC.
- Apply secure coding standards, threat modeling, and vulnerability mitigation aligned to NIST 800-53 and CMMC Level 2/3 controls.
- Conduct architecture reviews and code hardening to address OWASP Top 10 and DoD STIGs.
-
Automate security gates in CI/CD pipelines (SAST, DAST, dependency scanning, secrets detection).
-
Security Architecture & Controls
- Design secure system and API architectures for multi-tenant cloud environments, including GCC High and FedRAMP-authorized platforms.
- Implement IAM controls, JIT provisioning, SSO/SAML/OIDC flows, and least-privilege authorization frameworks (e.g., Cognito, Azure AD).
-
Instrument applications with security logging and monitoring that satisfies audit and continuous monitoring requirements (AU/SI control families).
-
Vulnerability Management & Response
- Lead code reviews, SAST/DAST scans, and targeted penetration testing; document findings against control frameworks.
- Triage and remediate vulnerabilities within POA&M timelines; maintain artifact evidence for compliance assessments.
-
Support incident response for application-layer events; contribute to after-action reports and corrective action plans.
-
Cross-functional Collaboration
- Serve as the embedded security champion for engineering squads, raising the security bar through mentorship and code review culture.
- Develop and deliver security training and runbooks tailored to engineering and DevOps team members.
- Collaborate with DevOps/SRE to enforce secure IaC, WAF rules, network controls, and runtime monitoring across AWS and Azure environments.
Required Qualifications
- Bachelor’s degree in Computer Science, Engineering, or related field—or equivalent experience.
- 3+ years of software engineering experience with a strong focus on security.
- Proficiency in one or more programming languages (e.g., JavaScript/TypeScript, Python, Go, C#).
- Experience with secure coding practices and frameworks.
- Strong understanding of application security principles, including:
- OWASP Top 10
- Secure API/REST design
- Cryptography fundamentals
- Authentication/authorization patterns
- Experience with code scanning tools (SAST/DAST), threat modeling, and penetration testing.
- Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements and evidence collection.
- Hands-on experience with AWS and/or Azure security services (IAM, WAF, Security Hub, Defender, Sentinel); GCC High or GovCloud experience a plus.
Preferred Qualifications
- Experience with container security (Docker, ECS).
- Working knowledge of Zero Trust Architecture principles.
- Experience building DevSecOps pipelines in regulated environments; familiarity with tools like Prisma, Checkov, Snyk, or Aqua.
- Relevant certifications (any of the following):
- CISSP, CSSLP, or CASP+
- OSCP
- CEH
- GIAC (GWAPT, GSEC, GWEB) or CCP/CCA (UK Cyber Essentials equivalent)
- Experience securing microservices or event-driven architectures on ECS; background in federal or cleared environments preferred.
See all OPT Security Software Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Security Software Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as a Security Software Engineer
Target employers with active security clearance programs
Defense contractors and federal agencies like Booz Allen Hamilton and Leidos sponsor security engineers at high rates. These employers run structured hiring pipelines and are accustomed to immigration paperwork, making OPT transitions smoother than at smaller firms.
Align your degree field with the job description
Specialty occupation approval for H-1B visa depends on your degree matching the role. A computer science or cybersecurity degree is the clearest fit. If your degree is in a related field, emphasize coursework in networking, cryptography, or systems security in your application materials.
Get relevant certifications before you apply
Certifications like CompTIA Security+, CISSP, or CEH signal job readiness to hiring managers evaluating OPT candidates. Employers sponsoring H-1B petitions for security roles often cite certifications alongside degree requirements in their LCA filings with the Department of Labor.
Apply to companies mid-H-1B cycle, not just in January
Many OPT students wait until H-1B lottery season to apply, but employers hire security engineers year-round. Starting your job search six to nine months before OPT expiration gives you negotiating time and avoids the last-minute pressure that raises red flags for sponsors.
Highlight security clearance eligibility if you have it
Some OPT holders are eligible for Secret or Top Secret clearances depending on citizenship and background. If you qualify, make this explicit in your resume and applications. Clearance-eligible candidates are significantly harder to replace, which strengthens an employer's case for sponsorship.
Ask about sponsorship policy before the final interview round
Raise OPT and future H-1B sponsorship with the recruiter after an initial positive response, not at the offer stage. Framing it as a timeline question rather than a request signals professionalism and avoids wasting weeks in a process the employer was never going to complete.
Security Software Engineer OPT: Frequently Asked Questions
Do Security Software Engineer roles commonly qualify for STEM OPT extension?
Yes. Security Software Engineer is classified under CIP code 11.0701 (Computer Science) or 14.0901 (Computer Engineering) when the underlying degree is in those fields, both of which qualify for the 24-month STEM OPT extension. Your degree must appear on the STEM Designated Degree Program List, and your employer must be E-Verify enrolled to authorize the extension.
How do I find Security Software Engineer jobs that are open to OPT candidates?
Migrate Mate filters job listings specifically for visa sponsorship and OPT eligibility, so you're not guessing which employers will work with F-1 students. Searching there surfaces Security Software Engineer roles from companies that have actively sponsored similar positions, saving you the time of screening out employers who won't consider OPT candidates.
Can I work as a Security Software Engineer as an independent contractor on OPT?
Yes, but self-employment on OPT has strict requirements. You must be actively engaged in a bona fide business related to your degree field, and you cannot work for a single client in a way that resembles regular employment. You also bear full responsibility for tracking your own work authorization dates. Consulting your DSO before pursuing contractor arrangements is strongly recommended.
What happens to my OPT if my Security Software Engineer employer is acquired or goes through a layoff?
If you're laid off, your 60-day unemployment grace period begins immediately. You can use that time to find a new role, but you cannot work during it. If your employer is acquired and your job continues under the new entity, your OPT authorization generally remains valid as long as your role and degree alignment are unchanged. Notify your DSO in either situation.
Does working in a security software role on OPT affect a future H-1B petition?
It strengthens it. Documented OPT employment in security engineering builds the evidentiary record that USCIS evaluates when assessing specialty occupation status for H-1B. Your employer's LCA filing will reference your job duties, degree requirement, and prevailing wage level. Consistent employment in a well-defined security engineering role with clear degree alignment makes adjudication more straightforward.