STEM OPT Cybersecurity Analyst Jobs
Cybersecurity Analyst roles sit squarely within STEM-designated CIP codes, making them eligible for the 24-month STEM OPT extension beyond your initial 12 months. Your employer must be enrolled in E-Verify and sign a formal training plan. Degrees in computer science, information security, or related STEM fields qualify.
Find STEM OPT Cybersecurity Analyst JobsOverview
Showing 5 of 217+ Cybersecurity Analyst jobs
See all 217+ Cybersecurity Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cybersecurity Analyst roles.
Get Access To All JobsPosition Type:
Full time
Type Of Hire:
Experienced (relevant combo of work and education)
Job Description
We are FIS. Our technology powers the world’s economy and our teams bring innovation to life. We champion diversity to deliver the best products and solutions for our colleagues, clients and communities. If you’re ready to start learning, growing and making an impact with a career in fintech, we’d like to know: Are you FIS?
About the Role:
You will serve as a senior subject matter expert in cryptography and application security, focusing on protecting sensitive data through strong encryption and secure design. You will review, design, and govern cryptographic controls across systems and applications, ensuring alignment with regulatory and industry standards. This role combines hands-on technical expertise with cross-functional collaboration to embed security into development practices. Success in this role is measured by the strength, scalability, and compliance of implemented data protection strategies.
About the team:
FIS Encryption Compliance team is dedicated to enforcing FIS, industry, and government encryption and MFA standards, as well as best practices. You’ll be joining a group of four highly motivated individuals who work collaboratively across a wide range of FIS product lines. Our mission is to ensure that data entrusted to FIS by our clients remains secure and uncompromised. As a Senior Cyber Security Analyst, you’ll play an essential role, partnering closely with application owners, developers, risk analysts, and internal auditors. Your work will help guarantee that the products we deliver to our clients feature world-class security controls. We’re excited to have you on board and look forward to the contributions you’ll bring as we continue to uphold and advance our security standards.
What You Will Be Doing:
- Design and govern enterprise encryption and data protection controls across applications and platforms
- Review authentication, authorization, and cryptographic implementations for security risks and effectiveness
- Conduct risk assessments aligned with industry frameworks such as NIST and PCI DSS
- Collaborate with development teams to embed secure coding and encryption best practices
- Support the secure development of ASP.NET and .NET-based applications
- Evaluate and implement cryptographic algorithms, protocols, and key management solutions
- Ensure secure use of TLS/SSL, PKI, and modern authentication mechanisms across environments
- Provide guidance for secure integration of cryptographic APIs and libraries
- Support internal and external audits, ensuring compliance with regulatory and security requirements
- Identify and remediate vulnerabilities related to data protection and application security
Required Qualifications:
- Bachelor’s degree in computer science, information security, or related field, or equivalent practical experience
- Demonstrated experience in cybersecurity or information security with a focus on cryptography and data protection
- Hands-on expertise with encryption standards, cryptographic algorithms, and key management practices
- Strong understanding of TLS/SSL, PKI, and secure authentication and authorization mechanisms
- Experience securing web applications, particularly in ASP.NET or .NET environments
- Proficiency with cryptographic APIs, libraries, and secure development practices
- Knowledge of security frameworks and compliance standards such as NIST and PCI DSS
- Ability to assess risk, communicate findings, and influence secure design decisions
Preferred Qualifications:
- Industry certifications such as CISSP, CISM, or Security+
- Experience working in regulated industries such as financial services
- Familiarity with cloud security practices in Azure or AWS environments
- Experience with enterprise key management systems or hardware security modules (HSMs)
- Background in software development and secure coding practices
- Experience with IIS, MS SQL, and T-SQL in secure application environments
- Experience with data protection platforms such as CipherTrust (Vormetric) or OpenText (Voltage)
What We Offer you:
At FIS, you can grow your career as far as you want to take it. Here’s what else we offer:
- Opportunities to make an impact in fintech
- Personal and professional learning
- Inclusive, diverse work environment
- Resources to give back to your community
- Competitive salary and benefits
Privacy Statement
FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.
EEOC Statement
FIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here
For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.
Sourcing Model
Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.
Position Type:
Full time
Type Of Hire:
Experienced (relevant combo of work and education)
Job Description
We are FIS. Our technology powers the world’s economy and our teams bring innovation to life. We champion diversity to deliver the best products and solutions for our colleagues, clients and communities. If you’re ready to start learning, growing and making an impact with a career in fintech, we’d like to know: Are you FIS?
About the Role:
You will serve as a senior subject matter expert in cryptography and application security, focusing on protecting sensitive data through strong encryption and secure design. You will review, design, and govern cryptographic controls across systems and applications, ensuring alignment with regulatory and industry standards. This role combines hands-on technical expertise with cross-functional collaboration to embed security into development practices. Success in this role is measured by the strength, scalability, and compliance of implemented data protection strategies.
About the team:
FIS Encryption Compliance team is dedicated to enforcing FIS, industry, and government encryption and MFA standards, as well as best practices. You’ll be joining a group of four highly motivated individuals who work collaboratively across a wide range of FIS product lines. Our mission is to ensure that data entrusted to FIS by our clients remains secure and uncompromised. As a Senior Cyber Security Analyst, you’ll play an essential role, partnering closely with application owners, developers, risk analysts, and internal auditors. Your work will help guarantee that the products we deliver to our clients feature world-class security controls. We’re excited to have you on board and look forward to the contributions you’ll bring as we continue to uphold and advance our security standards.
What You Will Be Doing:
- Design and govern enterprise encryption and data protection controls across applications and platforms
- Review authentication, authorization, and cryptographic implementations for security risks and effectiveness
- Conduct risk assessments aligned with industry frameworks such as NIST and PCI DSS
- Collaborate with development teams to embed secure coding and encryption best practices
- Support the secure development of ASP.NET and .NET-based applications
- Evaluate and implement cryptographic algorithms, protocols, and key management solutions
- Ensure secure use of TLS/SSL, PKI, and modern authentication mechanisms across environments
- Provide guidance for secure integration of cryptographic APIs and libraries
- Support internal and external audits, ensuring compliance with regulatory and security requirements
- Identify and remediate vulnerabilities related to data protection and application security
Required Qualifications:
- Bachelor’s degree in computer science, information security, or related field, or equivalent practical experience
- Demonstrated experience in cybersecurity or information security with a focus on cryptography and data protection
- Hands-on expertise with encryption standards, cryptographic algorithms, and key management practices
- Strong understanding of TLS/SSL, PKI, and secure authentication and authorization mechanisms
- Experience securing web applications, particularly in ASP.NET or .NET environments
- Proficiency with cryptographic APIs, libraries, and secure development practices
- Knowledge of security frameworks and compliance standards such as NIST and PCI DSS
- Ability to assess risk, communicate findings, and influence secure design decisions
Preferred Qualifications:
- Industry certifications such as CISSP, CISM, or Security+
- Experience working in regulated industries such as financial services
- Familiarity with cloud security practices in Azure or AWS environments
- Experience with enterprise key management systems or hardware security modules (HSMs)
- Background in software development and secure coding practices
- Experience with IIS, MS SQL, and T-SQL in secure application environments
- Experience with data protection platforms such as CipherTrust (Vormetric) or OpenText (Voltage)
What We Offer you:
At FIS, you can grow your career as far as you want to take it. Here’s what else we offer:
- Opportunities to make an impact in fintech
- Personal and professional learning
- Inclusive, diverse work environment
- Resources to give back to your community
- Competitive salary and benefits
Privacy Statement
FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.
EEOC Statement
FIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here
For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.
Sourcing Model
Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.
See all 217+ STEM OPT Cybersecurity Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Cybersecurity Analyst Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as a Cybersecurity Analyst
Verify your CIP code before applying
Check that your degree's CIP code maps to a STEM-designated field using the USCIS STEM OPT list. Computer science (11.0101) and information assurance (11.1003) both qualify, but some IT management degrees do not, which can disqualify you mid-hiring process.
Confirm E-Verify enrollment before accepting offers
Ask your recruiter to confirm E-Verify enrollment before you sign anything. You can cross-check by searching the E-Verify employer search tool by company name. A company that is not enrolled cannot legally employ you on STEM OPT, regardless of their intent.
Target government contractors and regulated industries
Federal contractors are legally required to use E-Verify, which eliminates one barrier immediately. Defense, finance, and healthcare cybersecurity roles at contractors tend to have compliance infrastructure that makes STEM OPT onboarding faster and more standardized than at early-stage companies.
Negotiate your I-983 training plan before day one
The I-983 requires your employer to outline specific learning objectives tied to your STEM degree. Bring a draft to your offer negotiation that maps your cybersecurity coursework to the role's core responsibilities. Employers unfamiliar with STEM OPT often delay this, which can push back your extension approval.
Use Migrate Mate to filter for STEM OPT-ready employers
Search for Cybersecurity Analyst openings on Migrate Mate, which surfaces employers with verified E-Verify enrollment and active work authorization history. This removes the guesswork of cold-applying to companies that have never hired on STEM OPT.
File your extension 90 days before OPT expires
USCIS requires your STEM OPT extension application to be submitted no more than 90 days before your initial OPT end date. Missing this window means a gap in work authorization. Your DSO must update your I-20 first, so start that process at least two weeks before the 90-day mark.
Frequently Asked Questions
Does a cybersecurity degree qualify for the STEM OPT extension?
Yes, most cybersecurity and information security degrees carry STEM-designated CIP codes that qualify for the 24-month extension. Computer science, information assurance, and cybersecurity-specific programs are typically covered. Degrees in general IT management or business information systems may not qualify. Confirm your exact CIP code with your DSO and cross-check it against the USCIS STEM OPT designated degree program list before applying.
Can I work as a Cybersecurity Analyst at a company that is not on E-Verify?
No. E-Verify enrollment is a hard legal requirement for STEM OPT employers, not a preference. If your employer is not enrolled in E-Verify, you cannot legally work there on a STEM OPT extension, even if they want to hire you. Verify enrollment through the E-Verify employer search before accepting any offer. Migrate Mate shows employers with confirmed E-Verify status so you can filter before applying.
What does the I-983 training plan require for a Cybersecurity Analyst role?
The I-983 requires your employer to document how the Cybersecurity Analyst position provides practical training directly related to your STEM degree. The plan must include specific learning objectives, a description of supervision, and how the role connects to your academic coursework. Your employer signs it, your DSO endorses it, and USCIS reviews it as part of your extension. Vague job descriptions are the most common reason training plans get rejected or delayed.
What happens to my work authorization if my H-1B is selected in the lottery but my STEM OPT expires before October 1?
Cap-gap protection covers you. If your employer files an H-1B visa petition on your behalf during the registration period and it is selected, your STEM OPT work authorization automatically extends through September 30, giving you continuous work authorization until the October 1 H-1B start date. You do not need to stop working during this period, but your employer must maintain active employment and E-Verify enrollment throughout the cap-gap window.
How do I find Cybersecurity Analyst jobs where the employer already understands STEM OPT?
Search on Migrate Mate, which filters Cybersecurity Analyst roles by employers with verified E-Verify enrollment and documented work authorization history. This matters because employers unfamiliar with STEM OPT often withdraw offers once they learn about the I-983 training plan requirement or the 90-day DSO reporting obligations. Targeting companies with prior STEM OPT experience significantly reduces the risk of a last-minute offer rescission.