Security Engineer Visa Sponsorship Jobs in Virginia
Virginia is one of the strongest states for security engineer visa sponsorship, driven by the massive concentration of defense contractors, federal agencies, and cloud infrastructure companies in the Northern Virginia corridor. Major employers like Booz Allen Hamilton, Leidos, SAIC, and Amazon Web Services actively hire and sponsor security engineers across the Arlington, McLean, Reston, and Herndon area.
See All Security Engineer JobsOverview
Showing 5 of 119+ Security Engineer Jobs in Virginia with Visa Sponsorship jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 119+ Security Engineer Jobs in Virginia with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Engineer Jobs in Virginia with Visa Sponsorship.
Get Access To All JobsINTRODUCTION
Led by an experienced management team and supported by a strong investor group, including large and experienced institutions and strategic partners, EdgeConneX offers a dynamic, fast-paced work environment where we are bringing flexibility, proximity, power, and connectivity to some of the world’s key businesses. With major offices in Herndon, Denver, and Amsterdam, we have a global footprint and a unified team of employees committed to providing a premier customer experience and delivering the full spectrum of data center solutions, from core to edge, like no other data center provider can do. Focused on driving innovation and helping our customers define and deliver their own unique vision for the Edge, at any scale, in any market worldwide, for any requirement, we are building tomorrow’s data center infrastructure, today for some of the world’s most demanding Network, Content, and Cloud customers.
ROLE AND RESPONSIBILITIES
EdgeConneX is seeking a skilled and experienced Application Security Engineer to join our team. The ideal candidate will have at least five years of hands-on experience in application security, a bachelor’s degree or higher in Computer Science or a related field, strong knowledge of secure coding practices and relevant professional certifications. You will be responsible for ensuring the security of our software applications throughout the development life cycle, working closely with developers, architects, and IT teams to identify, remediate, and prevent security vulnerabilities. This position reports to our Global Head of Cybersecurity and is based in Herndon, VA and provides flexibility for a hybrid onsite work schedule. There is a limited amount of travel needed for this position, but the flexibility to do so would be ideal.
Primary Responsibilities
- Conduct security assessments, code reviews, and penetration testing of web and mobile applications.
- Integrate security into all phases of the SDLC, from design through deployment.
- Perform application threat modeling, secure design reviews, and code reviews.
- Implement and manage application security testing tools (SAST, DAST, SCA, IAST).
- Collaborate with software development teams to integrate security best practices into the SDLC.
- Identify, analyze, and remediate vulnerabilities using industry-standard tools and methodologies.
- Develop and maintain security policies, standards, and guidelines for application development.
- Monitor emerging threats, vulnerabilities, and security technologies to ensure proactive protection.
- Provide guidance and training to developers on secure coding practices.
- Participate in incident response activities related to application-level threats.
- Prepare detailed security reports and documentation for stakeholders and compliance purposes.
- Support compliance and audit requirements related to application security.
- Perform Research & Development for AI Prompt Injection Attacks, Payloads for IoT devices (byte code may be required).
BASIC QUALIFICATIONS
- Bachelor’s Degree or higher in Computer Science, Information Security, or a related discipline.
- 5+ years of professional experience in application security engineering in addition to educational background and internships.
- Strong knowledge of:
- AI, web and mobile application architectures and common vulnerabilities (e.g., OWASP Top 10).
- Web application and API security.
- Authentication, authorization, and session management.
- Encryption and secure data handling.
- Experience with:
- Application security testing tools (SAST, DAST, SCA, IAST).
- CI/CD pipeline integration and DevSecOps practices.
- Cloud-native application security (AWS, Azure, or GCP).
- Hands-on experience with security tools such as Burp Suite, OWASP ZAP, SAST/DAST scanners, and similar.
- Familiarity with secure coding practices in languages such as Java, C#, Python, or JavaScript.
- Professional security certifications such as CSSLP, CISSP, CEH, GWAPT, OSCP, Cloud security certifications (AWS / Azure Security) or equivalent.
- Excellent analytical, problem-solving, and communication skills.
- Ability to work collaboratively in a team environment and manage multiple projects simultaneously and proactive approach to improving security.
- Strong documentation and reporting skills.
PREFERRED QUALIFICATIONS
- Master’s Degree in a relevant IT field.
- Direct experience with cloud security and establishing DevSecOps practices.
- Knowledge of compliance frameworks such as PCI DSS, GDPR, or HIPAA.
- Experience with containers and Kubernetes security.
- Knowledge of Zero Trust and secure API gateways.
- Experience with bug bounty programs or red team collaboration.
- Contributions to open-source security projects or published research.
- Extensive penetration testing experience.
EdgeConneX believes inclusion – of thought, backgrounds and experiences – affects all that we do, from our employees to the solutions we deliver. Our goal is to create an environment where embracing differences helps deepen the lives and work experience of our employees, enhances our innovation and creativity, and enriches our involvement in our communities.
EdgeConneX is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin or ancestry, physical or mental disability, as well as any other category protected by applicable federal, state, or local laws.
LOCATION
Location: Herndon, VA
COMPENSATION
EdgeConneX offers a competitive benefits package. For more information on how we process your data, visit our Data Privacy Policy here.
INTRODUCTION
Led by an experienced management team and supported by a strong investor group, including large and experienced institutions and strategic partners, EdgeConneX offers a dynamic, fast-paced work environment where we are bringing flexibility, proximity, power, and connectivity to some of the world’s key businesses. With major offices in Herndon, Denver, and Amsterdam, we have a global footprint and a unified team of employees committed to providing a premier customer experience and delivering the full spectrum of data center solutions, from core to edge, like no other data center provider can do. Focused on driving innovation and helping our customers define and deliver their own unique vision for the Edge, at any scale, in any market worldwide, for any requirement, we are building tomorrow’s data center infrastructure, today for some of the world’s most demanding Network, Content, and Cloud customers.
ROLE AND RESPONSIBILITIES
EdgeConneX is seeking a skilled and experienced Application Security Engineer to join our team. The ideal candidate will have at least five years of hands-on experience in application security, a bachelor’s degree or higher in Computer Science or a related field, strong knowledge of secure coding practices and relevant professional certifications. You will be responsible for ensuring the security of our software applications throughout the development life cycle, working closely with developers, architects, and IT teams to identify, remediate, and prevent security vulnerabilities. This position reports to our Global Head of Cybersecurity and is based in Herndon, VA and provides flexibility for a hybrid onsite work schedule. There is a limited amount of travel needed for this position, but the flexibility to do so would be ideal.
Primary Responsibilities
- Conduct security assessments, code reviews, and penetration testing of web and mobile applications.
- Integrate security into all phases of the SDLC, from design through deployment.
- Perform application threat modeling, secure design reviews, and code reviews.
- Implement and manage application security testing tools (SAST, DAST, SCA, IAST).
- Collaborate with software development teams to integrate security best practices into the SDLC.
- Identify, analyze, and remediate vulnerabilities using industry-standard tools and methodologies.
- Develop and maintain security policies, standards, and guidelines for application development.
- Monitor emerging threats, vulnerabilities, and security technologies to ensure proactive protection.
- Provide guidance and training to developers on secure coding practices.
- Participate in incident response activities related to application-level threats.
- Prepare detailed security reports and documentation for stakeholders and compliance purposes.
- Support compliance and audit requirements related to application security.
- Perform Research & Development for AI Prompt Injection Attacks, Payloads for IoT devices (byte code may be required).
BASIC QUALIFICATIONS
- Bachelor’s Degree or higher in Computer Science, Information Security, or a related discipline.
- 5+ years of professional experience in application security engineering in addition to educational background and internships.
- Strong knowledge of:
- AI, web and mobile application architectures and common vulnerabilities (e.g., OWASP Top 10).
- Web application and API security.
- Authentication, authorization, and session management.
- Encryption and secure data handling.
- Experience with:
- Application security testing tools (SAST, DAST, SCA, IAST).
- CI/CD pipeline integration and DevSecOps practices.
- Cloud-native application security (AWS, Azure, or GCP).
- Hands-on experience with security tools such as Burp Suite, OWASP ZAP, SAST/DAST scanners, and similar.
- Familiarity with secure coding practices in languages such as Java, C#, Python, or JavaScript.
- Professional security certifications such as CSSLP, CISSP, CEH, GWAPT, OSCP, Cloud security certifications (AWS / Azure Security) or equivalent.
- Excellent analytical, problem-solving, and communication skills.
- Ability to work collaboratively in a team environment and manage multiple projects simultaneously and proactive approach to improving security.
- Strong documentation and reporting skills.
PREFERRED QUALIFICATIONS
- Master’s Degree in a relevant IT field.
- Direct experience with cloud security and establishing DevSecOps practices.
- Knowledge of compliance frameworks such as PCI DSS, GDPR, or HIPAA.
- Experience with containers and Kubernetes security.
- Knowledge of Zero Trust and secure API gateways.
- Experience with bug bounty programs or red team collaboration.
- Contributions to open-source security projects or published research.
- Extensive penetration testing experience.
EdgeConneX believes inclusion – of thought, backgrounds and experiences – affects all that we do, from our employees to the solutions we deliver. Our goal is to create an environment where embracing differences helps deepen the lives and work experience of our employees, enhances our innovation and creativity, and enriches our involvement in our communities.
EdgeConneX is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin or ancestry, physical or mental disability, as well as any other category protected by applicable federal, state, or local laws.
LOCATION
Location: Herndon, VA
COMPENSATION
EdgeConneX offers a competitive benefits package. For more information on how we process your data, visit our Data Privacy Policy here.
Security Engineer Job Roles in Virginia
See all 119+ Security Engineer Jobs in Virginia
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Security Engineer Jobs in VirginiaSecurity Engineer Jobs in Virginia: Frequently Asked Questions
Which companies sponsor visas for security engineers in Virginia?
Virginia's Northern Virginia corridor hosts some of the most active sponsors for security engineers. Defense and government IT contractors including Booz Allen Hamilton, Leidos, SAIC, and ManTech regularly file H-1B petitions for security engineering roles. Amazon Web Services, Capital One, and Northrop Grumman also appear consistently in Department of Labor disclosure data as Virginia-based sponsors for this role category.
Which visa types are most common for security engineer roles in Virginia?
The H-1B is the most common visa for security engineers in Virginia, as the role qualifies as a specialty occupation requiring at least a bachelor's degree in computer science, information security, or a related field. Some candidates also enter through the L-1B intracompany transfer visa if moving within a multinational employer. TN status is available for Canadian and Mexican nationals in qualifying engineering classifications.
Which cities in Virginia have the most security engineer sponsorship jobs?
Northern Virginia dominates, with Herndon, Reston, McLean, Arlington, and Tysons forming the core cluster of security engineering sponsorship activity. This region's proximity to federal agencies and the intelligence community drives exceptionally high demand. Richmond has a smaller but growing presence through financial services and state government IT. Outside Northern Virginia, activity drops significantly.
How to find security engineer visa sponsorship jobs in Virginia?
Migrate Mate filters job listings specifically by visa sponsorship availability, so you can search security engineer roles in Virginia without sifting through positions that won't support international candidates. Because Northern Virginia has a high volume of defense and federal IT roles that require security clearances, pay close attention to clearance requirements, as those positions often restrict sponsorship for candidates who cannot obtain clearance.
Are there state-specific factors that affect visa sponsorship for security engineers in Virginia?
Virginia's concentration of federal contractors introduces a complication most other states don't have: many security engineer roles require a U.S. security clearance, which is generally unavailable to foreign nationals on temporary work visas. This narrows the sponsorship pool compared to the total volume of security engineering jobs posted. Roles at commercial tech companies and cloud providers in Northern Virginia are more likely to be clearance-free and open to sponsored candidates.
What is the prevailing wage for sponsored security engineer jobs in Virginia?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.
See which security engineer employers are hiring and sponsoring visas in Virginia right now.
Search Security Engineer Jobs in Virginia