STEM OPT Cybersecurity Engineer Jobs
Cybersecurity Engineer roles sit squarely within STEM-designated fields, making them strong fits for F-1 students seeking the 24-month STEM OPT extension beyond their initial 12 months. Your employer must be enrolled in E-Verify, and your degree must align with an eligible CIP code tied to computer science, information security, or a related STEM discipline.
Find STEM OPT Cybersecurity Engineer JobsOverview
Showing 5 of 187+ Cybersecurity Engineer jobs
See all 187+ Cybersecurity Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cybersecurity Engineer roles.
Get Access To All JobsCompany Description
Defense In Depth Solutions is a women-owned IT services enterprise established in 2007, focused on delivering affordable and cutting-edge technology solutions to organizations of all sizes. The company maintains a large pool of experienced IT professionals skilled in addressing complex challenges and integrating emerging technologies in dynamic environments. Its services are designed to be high quality, reliable, resilient, and responsive, helping clients streamline processes and manage IT operations efficiently. By partnering with leading IT vendors, Defense In Depth Solutions ensures clients benefit from rapidly evolving technologies and can better understand and meet their own customers’ needs. The company aims to be a one-stop provider of tailored solutions across diverse industries and business segments.
Role Description
The Federal Cybersecurity Assessor is a full-time, on-site role based in Brooklyn, NY. This role is responsible for planning and performing cybersecurity assessments for federal systems and environments, including evaluating security controls, documenting findings, and recommending risk-based remediation strategies. The assessor will review policies, procedures, system configurations, and technical security measures to ensure compliance with federal standards and frameworks, and will prepare clear, actionable reports for both technical and non-technical stakeholders. Day-to-day activities may include conducting interviews with system owners, analyzing logs and security tool outputs, collaborating with IT and security teams on mitigation plans, and supporting continuous monitoring efforts. The role also involves staying current with evolving federal cybersecurity regulations and best practices to help enhance organizational security posture.
Qualifications
- Demonstrated experience in federal cybersecurity assessment, including evaluating security controls and documenting technical and non-technical findings.
- Strong knowledge of relevant federal cybersecurity frameworks and standards (e.g., NIST, FISMA, FedRAMP, RMF) and compliance-driven security practices.
- Proficiency with common security tools and technologies such as vulnerability scanners, configuration management tools, SIEM platforms, and endpoint security solutions.
- Ability to analyze complex IT environments, identify risks, and develop practical remediation recommendations in collaboration with cross-functional teams.
- Excellent written and verbal communication skills, with the ability to produce clear assessment reports and present findings to stakeholders at varying technical levels.
- Strong organizational and time-management skills, with the ability to manage multiple concurrent assessments and meet deadlines in a fast-paced environment.
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent experience may be considered.
- Relevant certifications such as CISSP, CISM, CISA, CAP, or Security+ are highly beneficial.
- Experience working with federal agencies or contractors and familiarity with federal information assurance requirements is preferred.
Company Description
Defense In Depth Solutions is a women-owned IT services enterprise established in 2007, focused on delivering affordable and cutting-edge technology solutions to organizations of all sizes. The company maintains a large pool of experienced IT professionals skilled in addressing complex challenges and integrating emerging technologies in dynamic environments. Its services are designed to be high quality, reliable, resilient, and responsive, helping clients streamline processes and manage IT operations efficiently. By partnering with leading IT vendors, Defense In Depth Solutions ensures clients benefit from rapidly evolving technologies and can better understand and meet their own customers’ needs. The company aims to be a one-stop provider of tailored solutions across diverse industries and business segments.
Role Description
The Federal Cybersecurity Assessor is a full-time, on-site role based in Brooklyn, NY. This role is responsible for planning and performing cybersecurity assessments for federal systems and environments, including evaluating security controls, documenting findings, and recommending risk-based remediation strategies. The assessor will review policies, procedures, system configurations, and technical security measures to ensure compliance with federal standards and frameworks, and will prepare clear, actionable reports for both technical and non-technical stakeholders. Day-to-day activities may include conducting interviews with system owners, analyzing logs and security tool outputs, collaborating with IT and security teams on mitigation plans, and supporting continuous monitoring efforts. The role also involves staying current with evolving federal cybersecurity regulations and best practices to help enhance organizational security posture.
Qualifications
- Demonstrated experience in federal cybersecurity assessment, including evaluating security controls and documenting technical and non-technical findings.
- Strong knowledge of relevant federal cybersecurity frameworks and standards (e.g., NIST, FISMA, FedRAMP, RMF) and compliance-driven security practices.
- Proficiency with common security tools and technologies such as vulnerability scanners, configuration management tools, SIEM platforms, and endpoint security solutions.
- Ability to analyze complex IT environments, identify risks, and develop practical remediation recommendations in collaboration with cross-functional teams.
- Excellent written and verbal communication skills, with the ability to produce clear assessment reports and present findings to stakeholders at varying technical levels.
- Strong organizational and time-management skills, with the ability to manage multiple concurrent assessments and meet deadlines in a fast-paced environment.
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent experience may be considered.
- Relevant certifications such as CISSP, CISM, CISA, CAP, or Security+ are highly beneficial.
- Experience working with federal agencies or contractors and familiarity with federal information assurance requirements is preferred.
See all 187+ STEM OPT Cybersecurity Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Cybersecurity Engineer Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as a Cybersecurity Engineer
Verify your CIP code before applying
Pull your official transcript and confirm your degree's CIP code maps to an approved STEM category. Cybersecurity-adjacent degrees in computer science, electrical engineering, or information assurance typically qualify, but a mismatch triggers a DSO rejection at the I-983 stage.
Filter employers by E-Verify enrollment status
Before submitting any application, confirm the employer is actively enrolled in E-Verify, not just registered. Ask HR directly or check through the E-Verify employer search. An unenrolled employer legally cannot sign your I-983 training plan.
Target roles with SOC codes matching your training plan
Your I-983 must show a direct connection between your STEM degree and the Cybersecurity Engineer role. Cross-reference the job's SOC code against your degree field using O*NET to document that relationship before your DSO submits the extension request.
Use Migrate Mate to find verified sponsoring employers
Search Migrate Mate to surface cybersecurity roles at employers with confirmed STEM OPT hiring history. The platform surfaces DOL Labor Condition Application data by role, so you can see which companies have filed for positions matching your background before applying.
Submit your STEM OPT extension application early
File your STEM OPT extension with USCIS at least 90 days before your initial OPT EAD expires. If your application is timely filed and pending on your end date, your work authorization automatically continues for up to 180 days while USCIS adjudicates.
Negotiate your I-983 training goals before signing
The I-983 training plan must list specific learning objectives tied to cybersecurity, not generic job duties. Work with your hiring manager to document measurable goals around skills like network security, threat analysis, or compliance frameworks before your DSO countersigns the form.
Frequently Asked Questions
Does a cybersecurity degree qualify for the STEM OPT extension?
Most cybersecurity degrees qualify, but eligibility depends on your degree's CIP code, not the job title. Degrees classified under computer science, information security, electrical engineering, or closely related STEM fields are typically approved. Your DSO confirms eligibility by matching your transcript's CIP code to the DHS STEM Designated Degree Program List before filing the extension.
What E-Verify requirement applies to my cybersecurity employer?
Your employer must be actively enrolled in E-Verify before you can begin STEM OPT employment. Enrollment means they have a current Memorandum of Understanding with the Department of Homeland Security and use E-Verify to confirm work authorization for new hires. The employer must also be enrolled at the specific worksite where you'll perform your cybersecurity duties, not just at corporate headquarters.
What goes into the I-983 training plan for a cybersecurity role?
The I-983 must connect your STEM degree directly to the Cybersecurity Engineer position with specific, measurable training goals. Expect to document objectives around areas like vulnerability assessment, incident response, security architecture, or compliance frameworks relevant to the role. Generic job descriptions don't meet the standard. USCIS requires a clear intellectual and practical bridge between your academic background and the work you'll perform.
Can I work as a Cybersecurity Engineer while my STEM OPT extension is pending?
Yes, if you filed your extension application before your initial OPT EAD expired, your employment authorization continues automatically for up to 180 days under USCIS cap-gap rules. You must remain employed at the E-Verify enrolled employer named in your pending application. If USCIS approves or denies before 180 days, that decision controls your authorization from that point forward.
Where can I find cybersecurity employers that hire STEM OPT students?
Migrate Mate is the recommended starting point for finding Cybersecurity Engineer roles at employers with confirmed STEM OPT hiring history. The platform surfaces DOL Labor Condition Application data by role and employer, so you can identify companies that have previously sponsored students in comparable positions rather than relying on job postings that don't disclose sponsorship practices upfront.