Staff Security Engineer Visa Sponsorship Jobs in Virginia
Staff security engineer roles in Virginia sit at the intersection of federal contracting, defense, and commercial tech. Major employers include Leidos, Booz Allen Hamilton, CACI International, and Amazon Web Services, with job clusters in Northern Virginia, Arlington, and Reston. Many positions require security clearances, which shapes sponsorship timelines and employer eligibility requirements.
Find Staff Security Engineer JobsOverview
Showing 5 of 6+ Staff Security Engineer Jobs in Virginia with Visa Sponsorship
See all Staff Security Engineer Jobs in Virginia with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Staff Security Engineer Jobs in Virginia with Visa Sponsorship.
Get Access To All JobsINTRODUCTION
Medallia is the pioneer and market leader in Experience Management. Our award-winning SaaS platform, Medallia Experience Cloud, leads the market in the management of experiences, insights, and actions for candidates, customers, employees, patients, and residents alike.
We believe that every experience is a memory that can last a lifetime. Experiences shape the way people feel about a company. And they greatly influence how likely people are to advocate, contribute, and stay. At Medallia, we are committed to creating a world where organizations are loved by their customers and their employees.
We empower exceptional people to create extraordinary experiences together.
THE ROLE AND TEAM
We are seeking a Senior Staff Product Security Engineer to lead Medallia's security strategy and assurance efforts for AI-powered products, agentic systems, next-generation platforms, and emerging technologies. This individual will serve as the technical leader for AI Security and Security Assurance, partnering with Product, Engineering, Architecture, Data Science, and Security teams to ensure security is embedded into the design, development, and deployment of modern AI-enabled capabilities. The ideal candidate combines deep expertise in application security, threat modeling, and security architecture with a strong understanding of Generative AI, LLMs, AI agents, and secure system design. They will identify emerging risks, establish scalable security practices, and help define Medallia's long-term approach to securing AI-enabled products and platforms.
Responsibilities:
AI Security Lead:
Serve as the technical authority for security reviews involving:
- Generative AI applications
- LLM-powered features
- AI agents
- Agentic workflows
- MCP (Model Context Protocol) integrations
- AI skills and marketplaces
- AI coding assistants
- Bring Your Own Model (BYOM) capabilities
Define security requirements and guardrails for AI-enabled products and services.
Evaluate emerging AI technologies and assess associated security risks.
Partner with engineering and product teams to ensure AI features are secure by design.
Threat Modeling & Security Architecture:
Lead threat modeling efforts for critical product and platform initiatives.
Establish and scale a threat modeling program across engineering organizations.
Conduct security architecture reviews for high-risk and strategic initiatives.
Develop security reference architectures, design patterns, and guidance for engineering teams.
Identify systemic security risks and drive long-term remediation strategies.
Security Assurance:
Own and evolve Product Security assurance activities including:
- Security reviews
- Security assessments
- AI security reviews
- Security testing strategies
- Security requirements and standards
Define risk-based approaches for evaluating emerging technologies.
Partner with engineering teams to embed security validation throughout the SDLC.
Secure Development & Developer Enablement:
Establish secure development standards for AI-enabled applications.
Drive adoption of secure coding practices across engineering teams.
Develop scalable developer guidance and security enablement programs.
Evaluate and implement approaches to improve security feedback during development, including AI-assisted security review capabilities.
Security Automation & Innovation:
Identify opportunities to automate security reviews and reduce manual effort.
Partner with security tooling owners to improve developer experience and security coverage.
Define metrics that measure effectiveness of AI security and security assurance programs.
Evaluate emerging security technologies relevant to AI and modern software development.
Cross-Functional Influence:
Partner closely with Product, Engineering, Architecture, Data Science, Privacy, Legal, Compliance, and Operations teams.
Influence technical direction through expertise and relationship-building.
Mentor Staff and Senior Engineers in threat modeling, architecture reviews, and AI security.
Candidates based in the Tysons Corner vicinity will be prioritized as this role is Hybrid, 3 days per week onsite.
MINIMUM QUALIFICATIONS
- 12+ years of experience in Product Security, Application Security, Security Architecture, or Security Engineering.
- Proven experience operating at Staff or Senior Staff level within a technology organization.
- Demonstrated expertise in:
- Threat Modeling
- Security Architecture Reviews
- Application Security
- Cloud Security
- Secure SDLC
- Vulnerability Management
- Secure Design Principles
- Experience securing modern architectures including:
- APIs
- Microservices
- Kubernetes
- Containers
- Cloud-native platforms
- Strong understanding of security frameworks and standards including:
- OWASP
- NIST
- SOC 2
- ISO 27001
- PCI DSS
- Demonstrated ability to influence engineering organizations and drive security outcomes without direct authority.
PREFERRED QUALIFICATIONS
- Experience securing:
- Generative AI applications
- LLM-based products
- AI agents
- Agentic workflows
- MCP integrations
- Retrieval-Augmented Generation (RAG) systems
- Familiarity with AI security concepts including:
- Prompt Injection
- Indirect Prompt Injection
- Tool Abuse
- Agent Authorization
- Data Leakage
- Model Abuse
- AI Threat Modeling
- Experience developing security guidance for AI-enabled software development.
- Security certifications such as CISSP, CSSLP, GIAC, AWS Security Specialty, or equivalent.
COMPENSATION
- The annual base salary range for this position is $184,000 - $245,000. Please note that the salary range information provided is a general guideline and combines all of the distinct labor markets within the US. It is uncommon for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on a variety of factors. Medallia considers factors such as (but not limited to) scope and responsibilities of the position, candidate’s work experience, candidate’s work location, education/training, key skills, internal peer equity, external market data, as well as, market and business considerations when making compensation decisions.
Medallia also offers competitive health and wellness benefits, including but not limited to medical, dental, vision, 401(k), short-term and long-term disability, life and AD&D insurance, statutory leaves, paid parental leave, and paid holidays. Benefits and eligibility may vary by location and role.
At Medallia, we celebrate diversity and recognize the value it brings to our customers and employees. Medallia is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age (40 and over), disability, genetic information, veteran status or military service, or any other status protected by state or local law. Individuals with a disability who need an accommodation to apply please contact us at ApplicantAccessibility@medallia.com. For information regarding how Medallia collects and uses personal information, please review our Privacy Policies. Applications will be accepted for 30 days from the date this role was posted or until the role has been filled.
INTRODUCTION
Medallia is the pioneer and market leader in Experience Management. Our award-winning SaaS platform, Medallia Experience Cloud, leads the market in the management of experiences, insights, and actions for candidates, customers, employees, patients, and residents alike.
We believe that every experience is a memory that can last a lifetime. Experiences shape the way people feel about a company. And they greatly influence how likely people are to advocate, contribute, and stay. At Medallia, we are committed to creating a world where organizations are loved by their customers and their employees.
We empower exceptional people to create extraordinary experiences together.
THE ROLE AND TEAM
We are seeking a Senior Staff Product Security Engineer to lead Medallia's security strategy and assurance efforts for AI-powered products, agentic systems, next-generation platforms, and emerging technologies. This individual will serve as the technical leader for AI Security and Security Assurance, partnering with Product, Engineering, Architecture, Data Science, and Security teams to ensure security is embedded into the design, development, and deployment of modern AI-enabled capabilities. The ideal candidate combines deep expertise in application security, threat modeling, and security architecture with a strong understanding of Generative AI, LLMs, AI agents, and secure system design. They will identify emerging risks, establish scalable security practices, and help define Medallia's long-term approach to securing AI-enabled products and platforms.
Responsibilities:
AI Security Lead:
Serve as the technical authority for security reviews involving:
- Generative AI applications
- LLM-powered features
- AI agents
- Agentic workflows
- MCP (Model Context Protocol) integrations
- AI skills and marketplaces
- AI coding assistants
- Bring Your Own Model (BYOM) capabilities
Define security requirements and guardrails for AI-enabled products and services.
Evaluate emerging AI technologies and assess associated security risks.
Partner with engineering and product teams to ensure AI features are secure by design.
Threat Modeling & Security Architecture:
Lead threat modeling efforts for critical product and platform initiatives.
Establish and scale a threat modeling program across engineering organizations.
Conduct security architecture reviews for high-risk and strategic initiatives.
Develop security reference architectures, design patterns, and guidance for engineering teams.
Identify systemic security risks and drive long-term remediation strategies.
Security Assurance:
Own and evolve Product Security assurance activities including:
- Security reviews
- Security assessments
- AI security reviews
- Security testing strategies
- Security requirements and standards
Define risk-based approaches for evaluating emerging technologies.
Partner with engineering teams to embed security validation throughout the SDLC.
Secure Development & Developer Enablement:
Establish secure development standards for AI-enabled applications.
Drive adoption of secure coding practices across engineering teams.
Develop scalable developer guidance and security enablement programs.
Evaluate and implement approaches to improve security feedback during development, including AI-assisted security review capabilities.
Security Automation & Innovation:
Identify opportunities to automate security reviews and reduce manual effort.
Partner with security tooling owners to improve developer experience and security coverage.
Define metrics that measure effectiveness of AI security and security assurance programs.
Evaluate emerging security technologies relevant to AI and modern software development.
Cross-Functional Influence:
Partner closely with Product, Engineering, Architecture, Data Science, Privacy, Legal, Compliance, and Operations teams.
Influence technical direction through expertise and relationship-building.
Mentor Staff and Senior Engineers in threat modeling, architecture reviews, and AI security.
Candidates based in the Tysons Corner vicinity will be prioritized as this role is Hybrid, 3 days per week onsite.
MINIMUM QUALIFICATIONS
- 12+ years of experience in Product Security, Application Security, Security Architecture, or Security Engineering.
- Proven experience operating at Staff or Senior Staff level within a technology organization.
- Demonstrated expertise in:
- Threat Modeling
- Security Architecture Reviews
- Application Security
- Cloud Security
- Secure SDLC
- Vulnerability Management
- Secure Design Principles
- Experience securing modern architectures including:
- APIs
- Microservices
- Kubernetes
- Containers
- Cloud-native platforms
- Strong understanding of security frameworks and standards including:
- OWASP
- NIST
- SOC 2
- ISO 27001
- PCI DSS
- Demonstrated ability to influence engineering organizations and drive security outcomes without direct authority.
PREFERRED QUALIFICATIONS
- Experience securing:
- Generative AI applications
- LLM-based products
- AI agents
- Agentic workflows
- MCP integrations
- Retrieval-Augmented Generation (RAG) systems
- Familiarity with AI security concepts including:
- Prompt Injection
- Indirect Prompt Injection
- Tool Abuse
- Agent Authorization
- Data Leakage
- Model Abuse
- AI Threat Modeling
- Experience developing security guidance for AI-enabled software development.
- Security certifications such as CISSP, CSSLP, GIAC, AWS Security Specialty, or equivalent.
COMPENSATION
- The annual base salary range for this position is $184,000 - $245,000. Please note that the salary range information provided is a general guideline and combines all of the distinct labor markets within the US. It is uncommon for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on a variety of factors. Medallia considers factors such as (but not limited to) scope and responsibilities of the position, candidate’s work experience, candidate’s work location, education/training, key skills, internal peer equity, external market data, as well as, market and business considerations when making compensation decisions.
Medallia also offers competitive health and wellness benefits, including but not limited to medical, dental, vision, 401(k), short-term and long-term disability, life and AD&D insurance, statutory leaves, paid parental leave, and paid holidays. Benefits and eligibility may vary by location and role.
At Medallia, we celebrate diversity and recognize the value it brings to our customers and employees. Medallia is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age (40 and over), disability, genetic information, veteran status or military service, or any other status protected by state or local law. Individuals with a disability who need an accommodation to apply please contact us at ApplicantAccessibility@medallia.com. For information regarding how Medallia collects and uses personal information, please review our Privacy Policies. Applications will be accepted for 30 days from the date this role was posted or until the role has been filled.
Staff Security Engineer Job Roles in Virginia
See all Staff Security Engineer Jobs in Virginia
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Staff Security Engineer Jobs in VirginiaStaff Security Engineer Jobs in Virginia: Frequently Asked Questions
Which companies sponsor visas for staff security engineers in Virginia?
Northern Virginia's federal contracting corridor drives much of the sponsorship activity for staff security engineers. Employers such as Leidos, Booz Allen Hamilton, Peraton, Raytheon, Northrop Grumman, and Amazon Web Services have established LCA filing histories for security engineering roles. Large cloud and cybersecurity firms in Reston and Tysons Corner also sponsor regularly, though positions requiring active security clearances can restrict eligibility for foreign nationals.
Which visa types realistically fit staff security engineer roles in Virginia?
Staff security engineering is a specialty occupation requiring a directly related bachelor's degree, so H-1B visa, E-3 visa (Australian nationals), H-1B1 visa (Chilean and Singaporean nationals), and TN visa (Canadian and Mexican nationals holding an engineering degree) all fit the role. Longer-term, EB-2 or EB-3 employment-based green cards are available. F-1 students may use OPT or, if their degree is STEM-designated, the 24-month STEM OPT extension.
Which cities in Virginia have the most staff security engineer sponsorship jobs?
Northern Virginia dominates, with Arlington, Reston, McLean, Herndon, and Chantilly hosting the highest concentration of sponsoring employers. This corridor houses the region's federal agency offices, major defense contractors, and cloud infrastructure operators. Richmond has a smaller but growing cybersecurity presence tied to financial services firms. Virginia Beach sees security engineering demand linked to Navy and military support contractors.
How to find staff security engineer visa sponsorship jobs in Virginia?
Migrate Mate lists Virginia employers with verified LCA sponsorship history for security engineering roles, so you can search specifically for companies that have already sponsored positions matching your background. Filtering by role and state surfaces active sponsors in Northern Virginia's contracting hub and commercial tech corridor, saving time compared to manually screening employers who have never filed for security engineering positions.
Are there state-specific factors that affect visa sponsorship for staff security engineers in Virginia?
Virginia's high concentration of federal contracts introduces a practical constraint: many staff security engineer roles require a U.S. security clearance, which is generally unavailable to foreign nationals who are not permanent residents or citizens. This limits the pool of sponsoring positions at defense contractors. Commercial employers in Northern Virginia's tech sector, including cloud providers and cybersecurity firms, are not bound by clearance requirements and sponsor more freely.
What is the prevailing wage for sponsored staff security engineer jobs in Virginia?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.