STEM OPT Application Security Engineer Jobs
Application Security Engineer roles qualify for STEM OPT because they fall under computer science and engineering CIP codes. Your 24-month STEM OPT extension gives you up to 36 months of total work authorization, provided your employer is enrolled in E-Verify and you file a completed I-983 training plan with your DSO.
See All Application Security Engineer JobsOverview
Showing 5 of 24+ Application Security Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all Application Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Application Security Engineer roles.
Get Access To All JobsPosition Summary
The Information Security team has the herculean task of assuring that customers can safely shop with peace of mind knowing their data and information will be safe and secure. Solving some of the most unique cybersecurity problems in the industry, our team members share an elevated level of creativity and ingenuity to secure data for the largest retail operation in the world.
As part of Product Security, this role plays a critical part in advancing security automation and governance capabilities embedded directly into developer workflows. You will help define, validate, and govern secure architecture, configuration standards, and enterprise control logic across Walmart’s application ecosystem—ensuring automated validation decisions are defensible, risk-aligned, scalable, and audit-ready.
- Leverage your proven experience, passion, and enthusiasm partnering with technology and business stakeholders to integrate security early in the product lifecycle.
- Define and govern secure architecture patterns, configuration standards, and enterprise control logic to ensure consistent and scalable security validation across applications.
- Develop deep knowledge of products and platforms to define secure-by-default implementation guidance.
- Design and validate automated control logic that produces defensible, risk-aligned validation outcomes.
- Display strong expertise in threat modeling, penetration/security testing, and code reviews, and collaboratively partner to accelerate priority business initiatives.
- Evaluate and operationalize SAST, SCA, and related security tooling outputs to ensure accurate risk detection and reduce misconfiguration exposure.
- Serve as a trusted partner for technology and business stakeholders by securely enabling business initiatives through architecture and configuration reviews.
- Map security controls to applicable compliance frameworks and ensure validation outcomes generate reliable audit evidence.
- Build strong collaborative partnerships with stakeholders that securely accelerate speed to market for the business.
- Provide secure design, development, implementation, sustainment, and governance expertise across the application lifecycle.
- Effectively document product security standards, validation logic, and governance decisions.
- Develop and evolve metrics to measure the efficacy, accuracy, and coverage of automated product security controls.
- Mentor and share knowledge with stakeholders and peers to advance secure engineering maturity.
- Continually exercise effective communication, writing, and presentation skills.
You’ll make an impact by
- Supporting Fortune 1’s priority business and technology initiatives through scalable, automated security governance.
- Reducing manual and inconsistent security review processes by embedding secure standards and validation logic directly into engineering workflows.
- Collaborating and delivering global solutions that enable our customers to Save Money and Live Better.
- You have proven experience partnering with technology and business stakeholders to integrate security early in the product lifecycle.
- You have deep expertise in OWASP risks, secure coding patterns, and threat modeling, with the ability to define secure-by-default standards and clearly distinguish acceptable risk tradeoffs.
- You have strong experience governing secure architecture and defining configuration baselines across enterprise environments (e.g., authorization models, database hardening, input validation frameworks).
- You have demonstrated proficiency designing and validating security controls, mapping them to compliance frameworks, and producing defensible audit evidence.
- You have experience operationalizing SAST and SCA tooling outputs, assessing misconfiguration risk, and minimizing false positive and false negative validation outcomes.
- You have experience aligning technical security decisions with enterprise risk modeling and risk acceptance frameworks.
- You enjoy solving complex technical challenges while collaboratively partnering to accelerate priority business initiatives on scale.
At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see https://one.walmart.com/notices. Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
For information about benefits and eligibility, see One.Walmart.
Location
Bentonville, Arkansas US-10735: The annual salary range for this position is $110,000.00 - $220,000.00
Herndon, Virginia US-10710: The annual salary range for this position is $132,000.00 - $264,000.00. Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include:
- Stock
Minimum Qualifications
Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 4 years’ experience in application security, or related area at a technology, retail, or data-driven company.
Option 2: 6 years’ experience in application security, or related area at a technology, retail, or data-driven company.
Preferred Qualifications
Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.
Certification in Security+, GISF, CISSP, CSSP, CASE, or GWEB, Master’s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area and 2 years’ experience leading information security or cybersecurity projects. We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture.
Primary Location
2501 Se J St, Ste A, Bentonville, AR 72716-3724, United States of America
Walmart and its subsidiaries are committed to maintaining a drug-free workplace and has a no tolerance policy regarding the use of illegal drugs and alcohol on the job. This policy applies to all employees and aims to create a safe and productive work environment.
Position Summary
The Information Security team has the herculean task of assuring that customers can safely shop with peace of mind knowing their data and information will be safe and secure. Solving some of the most unique cybersecurity problems in the industry, our team members share an elevated level of creativity and ingenuity to secure data for the largest retail operation in the world.
As part of Product Security, this role plays a critical part in advancing security automation and governance capabilities embedded directly into developer workflows. You will help define, validate, and govern secure architecture, configuration standards, and enterprise control logic across Walmart’s application ecosystem—ensuring automated validation decisions are defensible, risk-aligned, scalable, and audit-ready.
- Leverage your proven experience, passion, and enthusiasm partnering with technology and business stakeholders to integrate security early in the product lifecycle.
- Define and govern secure architecture patterns, configuration standards, and enterprise control logic to ensure consistent and scalable security validation across applications.
- Develop deep knowledge of products and platforms to define secure-by-default implementation guidance.
- Design and validate automated control logic that produces defensible, risk-aligned validation outcomes.
- Display strong expertise in threat modeling, penetration/security testing, and code reviews, and collaboratively partner to accelerate priority business initiatives.
- Evaluate and operationalize SAST, SCA, and related security tooling outputs to ensure accurate risk detection and reduce misconfiguration exposure.
- Serve as a trusted partner for technology and business stakeholders by securely enabling business initiatives through architecture and configuration reviews.
- Map security controls to applicable compliance frameworks and ensure validation outcomes generate reliable audit evidence.
- Build strong collaborative partnerships with stakeholders that securely accelerate speed to market for the business.
- Provide secure design, development, implementation, sustainment, and governance expertise across the application lifecycle.
- Effectively document product security standards, validation logic, and governance decisions.
- Develop and evolve metrics to measure the efficacy, accuracy, and coverage of automated product security controls.
- Mentor and share knowledge with stakeholders and peers to advance secure engineering maturity.
- Continually exercise effective communication, writing, and presentation skills.
You’ll make an impact by
- Supporting Fortune 1’s priority business and technology initiatives through scalable, automated security governance.
- Reducing manual and inconsistent security review processes by embedding secure standards and validation logic directly into engineering workflows.
- Collaborating and delivering global solutions that enable our customers to Save Money and Live Better.
- You have proven experience partnering with technology and business stakeholders to integrate security early in the product lifecycle.
- You have deep expertise in OWASP risks, secure coding patterns, and threat modeling, with the ability to define secure-by-default standards and clearly distinguish acceptable risk tradeoffs.
- You have strong experience governing secure architecture and defining configuration baselines across enterprise environments (e.g., authorization models, database hardening, input validation frameworks).
- You have demonstrated proficiency designing and validating security controls, mapping them to compliance frameworks, and producing defensible audit evidence.
- You have experience operationalizing SAST and SCA tooling outputs, assessing misconfiguration risk, and minimizing false positive and false negative validation outcomes.
- You have experience aligning technical security decisions with enterprise risk modeling and risk acceptance frameworks.
- You enjoy solving complex technical challenges while collaboratively partnering to accelerate priority business initiatives on scale.
At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see https://one.walmart.com/notices. Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
For information about benefits and eligibility, see One.Walmart.
Location
Bentonville, Arkansas US-10735: The annual salary range for this position is $110,000.00 - $220,000.00
Herndon, Virginia US-10710: The annual salary range for this position is $132,000.00 - $264,000.00. Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include:
- Stock
Minimum Qualifications
Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 4 years’ experience in application security, or related area at a technology, retail, or data-driven company.
Option 2: 6 years’ experience in application security, or related area at a technology, retail, or data-driven company.
Preferred Qualifications
Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.
Certification in Security+, GISF, CISSP, CSSP, CASE, or GWEB, Master’s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area and 2 years’ experience leading information security or cybersecurity projects. We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture.
Primary Location
2501 Se J St, Ste A, Bentonville, AR 72716-3724, United States of America
Walmart and its subsidiaries are committed to maintaining a drug-free workplace and has a no tolerance policy regarding the use of illegal drugs and alcohol on the job. This policy applies to all employees and aims to create a safe and productive work environment.
See all Application Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Application Security Engineer roles.
Get Access To All JobsTips for Finding STEM OPT Authorization as an Application Security Engineer
Verify your degree CIP code first
Check that your degree's CIP code falls under an approved STEM category before applying. Computer science (11.xx), information security (11.1003), and engineering (14.xx) codes all qualify, but some interdisciplinary degrees don't. Confirm eligibility with your DSO before targeting roles.
Confirm E-Verify enrollment before accepting offers
Any employer who hires you on STEM OPT must be enrolled in E-Verify, not just willing to enroll. Ask recruiters directly and verify through the E-Verify employer search before signing anything. A non-enrolled employer disqualifies your extension regardless of role fit.
Target security teams at regulated industries
Financial services, healthcare, and defense contractors face strict compliance mandates that create standing demand for application security engineers. These industries file consistent STEM OPT training plans and are familiar with I-983 requirements, reducing delays after you receive an offer.
Build your I-983 training plan around AppSec milestones
Don't wait until offer acceptance to draft your I-983. Map your planned work to specific learning objectives tied to secure SDLC, penetration testing, or threat modeling. A well-prepared training plan speeds DSO approval and signals readiness to compliance-aware employers.
Use Migrate Mate to find E-Verify employers hiring AppSec engineers
Filter your search on Migrate Mate by employers with confirmed E-Verify enrollment and active application security roles. This cuts time spent vetting employers manually and surfaces companies already familiar with STEM OPT filing requirements.
File your extension request 90 days before OPT expiration
USCIS requires your STEM OPT extension application to be submitted at least 90 days before your initial OPT EAD expires. Missing this window means a gap in work authorization. Your DSO must recommend the extension in SEVIS before you file Form I-765.
Application Security Engineer jobs are hiring across the US. Find yours.
Find Application Security Engineer JobsFrequently Asked Questions
Does an Application Security Engineer role qualify for the STEM OPT extension?
Yes, if your degree is in a qualifying STEM field such as computer science, information security, or software engineering. The role itself must also provide structured learning tied to your degree, which you document in the I-983 training plan. Application security work typically maps cleanly to these requirements because it involves technically complex, degree-relevant skills. Your DSO makes the final eligibility determination based on your specific degree CIP code.
What E-Verify requirements does my employer need to meet for STEM OPT?
Your employer must be actively enrolled in E-Verify at the time you begin work on the STEM OPT extension. Enrollment after hiring does not satisfy this requirement retroactively. You can check employer enrollment status through the E-Verify employer search tool. The employer must also sign your I-983 training plan, confirming they will provide the documented learning experience for the full extension period.
What goes into the I-983 training plan for an Application Security Engineer?
The I-983 requires you to describe specific training goals tied to your STEM degree, the skills you'll develop, and how the employer will supervise and evaluate your progress. For an application security role, this typically includes objectives around secure code review, vulnerability assessment, threat modeling, or incident response. The employer's designated supervisor signs the plan, and you submit it to your DSO before the extension begins. You also file an evaluation update at the 12-month mark.
How does cap-gap protection apply if my employer files an H-1B petition while I'm on STEM OPT?
If your employer files an H-1B petition before your STEM OPT EAD expires and you're selected in the lottery, cap-gap automatically extends your work authorization through September 30 of that fiscal year. You don't need to file separately for cap-gap. Your I-20 should be updated by your DSO to reflect the cap-gap period. USCIS confirms the underlying rules governing this extension, so verify your specific dates with your DSO.
Where can I find Application Security Engineer jobs where employers already understand STEM OPT?
Migrate Mate lists application security roles filtered by employers enrolled in E-Verify, which is the baseline requirement for your STEM OPT extension. Searching there saves time compared to screening employers manually. Look for roles at companies in regulated sectors like finance or healthcare, where dedicated security teams and compliance infrastructure mean faster I-983 processing and less employer education required on your end.
See which Application Security Engineer employers are hiring and sponsoring visas right now.
Search Application Security Engineer Jobs