STEM OPT Security Engineering Manager Jobs
Security Engineering Manager roles qualify for the 24-month STEM OPT extension if your degree falls under an eligible CIP code in computer science, cybersecurity, or a related engineering field. Your employer must be enrolled in E-Verify, and you'll need a signed I-983 training plan outlining how the role develops your technical skills.
Find STEM OPT Security Engineering Manager JobsOverview
Showing 5 of 10+ Security Engineering Manager jobs










See all Security Engineering Manager Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Engineering Manager roles.
Get Access To All Jobs
INTRODUCTION
Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.
Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.
ROLE AND RESPONSIBILITIES
The Email Security & Network Defense (ESND) team protects the enterprise by engineering adaptive defense systems across email, network edge, secure browsing, application control, and emerging AI workflows. As a Software Engineering, MTS on this team, you build and maintain the security architecture that keeps Salesforce resilient against evolving threats, using an automation-first philosophy and Agile execution to deploy modern defenses without slowing business momentum. You use Artificial Intelligence (AI) as a core part of your engineering workflow, working alongside AI agents to design, build, and govern secure systems at scale.
What You'll Actually Be Doing:
- Develop security solutions leveraging best development practices and modern AI tools and approaches.
- Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
- Contribute to Infrastructure-as-Code automation efforts to provision and manage security systems, ensuring version-controlled and repeatable deployments across global environments.
- Develop and maintain Configuration-as-Code for policy governance for security configurations, using Continuous Integration/Continuous Delivery (CI/CD) pipelines to validate and deploy changes, guaranteeing that security tooling is auditable and peer-reviewed.
- Support and maintain application control policies, tuning, and ongoing management to ensure effective enforcement across the organization.
- Support and maintain secure internet access solutions, including Secure Access Service Edge (SASE) architectures, TLS inspection (TLSi), and secure browser technologies.
- Design and orchestrate systems where AI agents integrate seamlessly into security workflows, driving efficiency and innovation at scale.
- Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably, and critically evaluate code (human- or AI-generated) for correctness, quality, security, and performance.
- Collaborate with cross-functional teams, including Security, Information Technology (IT), and the Computer Security Incident Response Team (CSIRT), to enhance security controls.
- Develop and maintain documentation for security processes and procedures.
- Identify and implement improvements to security systems and processes.
BASIC QUALIFICATIONS
You're Our Person If...
- You have 3+ years of experience working in a large-scale, enterprise security environment.
- Experience building software in one or more languages such as Golang, Python, Java, or similar.
- Experience automating infrastructure or operational workflows using scripting languages (e.g., Bash, Python) and tools like Terraform/Ansible.
- You are proficient with container-based development and CI/CD workflows.
- You understand Amazon Web Services (AWS) cloud infrastructure and services, including containers, Kubernetes, and microservices architecture.
- You bring a demonstrated, genuine AI-first approach to engineering, using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
- You have experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor, etc.) in development workflows, with advanced prompt engineering skills and the ability to write precise, structured prompts that cultivate the system context making AI outputs reliable, secure, and production-ready.
- You have a proven track record of developing and maintaining documentation for security processes and procedures.
- You have a Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
PREFERRED QUALIFICATIONS
Even Better If...
- You have experience automating workflows or in DevSecOps.
- You have experience with application control, secure browser, Socket firewall, Proofpoint, or SASE platforms.
- You have experience securing AI and Large Language Model (LLM) workflows, encompassing the protection of agentic pipelines, model-serving endpoints, and technical supply chains through application control.
- You hold a CISSP, CCSP, CISM, Security+, or similar security or network certification.
COMPENSATION
- The typical base salary range for this position is $117,200 - $176,700 annually.
The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
ACCOMMODATIONS
If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.
Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.
POSTING STATEMENT
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.
At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.
See all STEM OPT Security Engineering Manager Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Security Engineering Manager Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as a Security Engineering Manager
Verify your CIP code before applying
Check that your degree's Classification of Instructional Programs code appears on the STEM Designated Degree Program list published by ICE. Cybersecurity, computer science, and systems engineering degrees typically qualify, but management information systems degrees sometimes don't.
Confirm E-Verify enrollment before accepting offers
Ask recruiters directly whether the company is enrolled in E-Verify before you get to the offer stage. You can also search the E-Verify employer search tool to confirm enrollment independently, since STEM OPT authorization is invalid without it.
Frame your I-983 training plan around management competencies
Security Engineering Manager roles require an I-983 that maps technical oversight, team leadership, and security architecture decisions to your STEM degree. Generic training plans get rejected. Work with your DSO early to document how managerial responsibilities connect to your academic background.
Target companies with dedicated security engineering orgs
Use Migrate Mate to filter for employers with verified STEM OPT hiring history in security and engineering roles. Companies with standalone security teams are more likely to have the E-Verify enrollment and HR infrastructure to support your authorization correctly.
Understand the 60-day job search window between roles
If your Security Engineering Manager position ends, USCIS gives you 60 days to find a new employer enrolled in E-Verify and file a new I-983. Starting that search before your current role ends is the only way to avoid losing your STEM OPT period.
Check prevailing wage expectations before negotiating
Use the OFLC Wage Search to look up the prevailing wage for security engineering manager roles in your target metro area. Employers filing an LCA for your eventual H-1B visa sponsorship must meet this floor, so understanding it early prevents misaligned offer negotiations.
Frequently Asked Questions
Does a Security Engineering Manager role qualify for the STEM OPT extension?
Yes, if your degree carries an eligible CIP code, typically in computer science, cybersecurity, electrical engineering, or a related STEM field listed on the ICE STEM Designated Degree Program list. The job title alone doesn't determine eligibility. USCIS evaluates whether the role directly relates to your degree field, and a Security Engineering Manager position that involves technical security architecture and systems oversight generally satisfies that standard.
What does the I-983 training plan need to include for a management role?
The I-983 must show a clear connection between your STEM degree and the practical training you'll receive in the Security Engineering Manager role. That means documenting specific technical responsibilities like threat modeling, security tooling decisions, and engineering oversight, not just team management duties. Your DSO and employer both sign it, and USCIS can audit it at any time during your 24-month extension.
How do I confirm my employer is enrolled in E-Verify before I accept an offer?
You can use the official E-Verify employer search tool to look up any company by name or location. If the employer doesn't appear or their enrollment has lapsed, your STEM OPT authorization won't be valid even if your I-983 is approved. Bring this up with the recruiter early in the process, since mid-process discovery of a non-enrolled employer can cost you the role and part of your authorization window.
Can I work as a Security Engineering Manager while waiting for my H-1B to be approved?
Yes, if your employer files an H-1B petition before your OPT expires, cap-gap protection extends your work authorization through September 30 of that fiscal year. If your H-1B is selected and approved, your status transitions on October 1. You must remain employed by the same E-Verify-enrolled employer throughout the cap-gap period for the extension to remain valid.
Where can I find Security Engineering Manager jobs where employers already understand STEM OPT requirements?
Migrate Mate filters job listings to surface employers with verified E-Verify enrollment and a track record of hiring international students. That's especially useful for Security Engineering Manager roles, where the combination of technical seniority and work authorization complexity can catch unprepared HR teams off guard. Searching on Migrate Mate reduces the risk of reaching offer stage only to discover the employer can't support your status.