STEM OPT Security Software Engineer Jobs
Security Software Engineer roles qualify for the 24-month STEM OPT extension if your degree falls under an eligible CIP code in computer science, cybersecurity, or a related engineering field. Employers must be enrolled in E-Verify, and you'll need a signed I-983 training plan before your extension starts.
Find STEM OPT Security Software Engineer JobsOverview
Showing 5 of 7+ Security Software Engineer jobs










See all Security Software Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Software Engineer roles.
Get Access To All Jobs
About Salesforce
Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.
Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.
- End-to-end software development across complex security data pipelines from ingestion to canonical data stores and downstream consumers.
- Own system architecture for endpoint protection platforms, including authoring System Design Records (SDRs) and Architecture Decision Records (ADRs).
- Drive platform reliability through availability monitoring strategies, alerting frameworks, and infrastructure hardening.
- Design and build APIs and services including REST API optimization, policy evaluation engines, integration adapter registries, and projection/aggregation services.
- Set engineering standards across the team for code quality, design consistency, and documentation practices.
- Mentor and guide other engineers on team through PR reviews, sprint planning, and technical deep dives.
- Collaborate cross-functionally with security architects, platform teams, and partner engineering orgs to ensure clean system integration and dependency alignment.
- Support on-call operations on a rotating schedule, including flexibility for major incidents across time zones.
- Leverage AI-assisted development tools to accelerate delivery, enforce engineering rigor, and support multi-language development.
What We're Looking For
Required:
- 2+ years of core software development experience with mastery in multiple programming languages and platforms.
- Strong foundation in database engineering, API development, and data pipeline construction, including experience with event-driven architectures, and distributed systems.
- Demonstrated ability to craft and deliver large, sophisticated projects across the full software lifecycle, including experience with products released for public consumption across multiple releases.
- Proven experience with infrastructure hardening and operational reliability (alerting, availability monitoring, MTTR reduction).
- Ability to design systems at scale including experience with architecture reviews, design documentation, and cross-team alignment; experience working with engineering teams, architects, and executive leadership to craft architectural vision and roadmap.
- Develops technical performance architecture that solves the most complex performance and scalability challenges, with the ability to drive long-term design strategies spanning multiple complex projects.
- Strong engineering process discipline: PR reviews, design reviews, sprint execution, and documentation; experience with Agile/Scrum methodologies and short release cycles.
- Ability to provide mentorship to team members, supporting their understanding of architecture and aiding in their technical growth.
- Skilled at fostering cross-functional technical collaboration to surface, escalate, and resolve critical issues effectively.
- Ability to deliver technical reports and performance presentations to customers and at industry events.
- A related technical degree required.
Preferred:
- Familiarity with Endpoint Detect and Response (EDR) or Vulnerability scanning is a plus.
- Familiarity with security tooling ecosystems.
- Experience working on or with security data pipelines.
Responsibilities:
- Ensure company and customer data remains secure, utilizing knowledge of a wide variety of security disciplines, including network, application and infrastructure security.
- Audit Salesforce cloud infrastructure against industry and company security standards, develop uplift plan, and execute on plan to align cloud infrastructure with those standards.
- Collaborate with various internal teams, including infrastructure, engineering, operations, and product development to design and architect infrastructure (i.e. network, operating system, databases) and applications to protect against attackers.
- Serve as a hands-on technical specialist, responsible for handling the complex and detailed technical work necessary to establish and maintain enhanced cloud security.
- Architect, configure, manage, and deploy technologies to improve Salesforce’s ability to prevent intrusions. Track down targeted vulnerabilities and defend against active adversaries. Research, gather threat intelligence and build, optimize, and automate systems to consume threat feeds and track adversaries.
- Create innovative solutions to complex security problems, including the design and use of software to identify security issues, deploy security solutions, and perform reporting activities.
- Mentor and guide engineering teams to achieve team deliverables.
- Communicate clearly to both Engineering and Executive audiences.
Desired Qualifications:
- You have 2+ years experience in a computer network-related occupation.
- You have 2+ years experience in each of the following skills:
- Unix/Linux system administration, including working with Windows environments and hardening guidelines;
- Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure and other public and private cloud infrastructure (EC2, VPC, ELB, S3, EMR, IAM); and
- Building and operating secure infrastructures.
- You have some experience in each of the following skills:
- Security disciplines including security engineering, vulnerability analysis, firewalls, and encryption technologies.
- Transmission Control Protocol/Internet Protocol (TCP/IP) networking, such as Open Systems Interconnection (OSI) stack, TCP, and Software-Defined Networking (SDN).
- Writing code in programming languages such as Python and Ruby to automate software/systems.
- Utilizing knowledge of core protocols and cryptographic standards to guide secure implementations.
- Security technologies, including host and network-based protection and detection technologies.
- Network, host and application security practices.
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
Accommodations
If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.
Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.
Posting Statement
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com. Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.
At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.
The typical base salary range for this position is $117,200 - $176,700 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $141,200 - $194,200 annually.
The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.
See all STEM OPT Security Software Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Security Software Engineer Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as a Security Software Engineer
Verify your CIP code before applying
Check that your degree's CIP code appears on the DHS STEM Designated Degree Program List. Cybersecurity and computer science programs typically qualify, but information systems degrees sometimes don't, so confirm with your DSO before accepting an offer.
Filter employers by E-Verify enrollment status
Before sending applications, confirm each employer is enrolled in E-Verify using the E-Verify employer search. Security software roles often appear at defense contractors and regulated financial firms, which are enrolled by compliance requirements, making them reliable targets.
Align your I-983 training plan to the role
Work with your hiring manager to map the Security Software Engineer job duties to specific learning objectives in the I-983. USCIS requires a demonstrable connection between your degree field and the role's technical scope, so vague job descriptions create extension risk.
Target employers with cleared or regulated environments
Use Migrate Mate to find Security Software Engineer openings filtered for STEM OPT-eligible employers. Defense, fintech, and healthcare IT employers often have structured onboarding for work-authorization candidates and existing E-Verify infrastructure already in place.
Address security clearance timing during offer negotiation
Many Security Software Engineer roles list clearance eligibility as preferred rather than required at hire. Clarify during the offer stage whether the role requires an active clearance on day one, since sponsoring your STEM OPT extension and initiating a clearance process run in parallel.
Submit your STEM OPT extension application 90 days early
File your STEM OPT extension application with USCIS up to 90 days before your initial OPT expires. If your I-765 is pending on your OPT end date, your cap-gap protection keeps your work authorization continuous while USCIS adjudicates the extension.
Frequently Asked Questions
Does a cybersecurity degree qualify for the STEM OPT extension for Security Software Engineer roles?
Cybersecurity degrees typically qualify if the program's CIP code appears on the DHS STEM Designated Degree Program List. Common qualifying codes include 11.1003 (Computer and Information Systems Security) and related computer engineering fields. Confirm your specific CIP code with your DSO before filing, since the degree program determines eligibility, not the job title itself.
What E-Verify requirement applies to employers hiring Security Software Engineer STEM OPT students?
Any employer hiring you on a STEM OPT extension must be enrolled in E-Verify at the worksite level where you'll work, not just at the company's headquarters. You can verify enrollment through the E-Verify employer search before accepting an offer. Without active E-Verify enrollment, the employer cannot legally employ you on the 24-month extension.
How should the I-983 training plan reflect Security Software Engineer job duties?
The I-983 must connect your specific engineering or computer science degree to the role's technical responsibilities. For Security Software Engineer positions, this means documenting learning objectives around secure code development, vulnerability assessment, or systems architecture that directly relate to your degree field. USCIS reviews this connection during adjudication, so generic job descriptions weaken the filing.
How does cap-gap protection work if my initial OPT expires while my STEM OPT extension is pending?
If you file your STEM OPT extension application before your initial OPT EAD expires, cap-gap protection automatically extends your work authorization while USCIS processes the I-765. You can continue working as a Security Software Engineer during this period without interruption. Carry both your expired EAD and your I-20 with the STEM OPT extension recommendation as proof of authorized status.
Where can I find Security Software Engineer jobs from employers already set up to hire STEM OPT students?
Migrate Mate lists Security Software Engineer roles filtered for employers with E-Verify enrollment and a history of hiring F-1 students on OPT. Searching there saves you from applying to companies that will stall or withdraw offers once they learn the E-Verify and I-983 requirements apply. You can also cross-reference the O*NET occupation profile to identify which degree fields align with the role's defined skill set.