Security Engineer Visa Sponsorship Jobs in Washington DC
Washington DC is a leading market for security engineer roles, driven by federal agencies, defense contractors, and cybersecurity firms concentrated across the DC metro area. Major employers including Booz Allen Hamilton, Leidos, SAIC, and Palantir regularly sponsor international engineers. The region's deep ties to government and national security make it one of the most active hiring markets for this role.
Find Security Engineer JobsOverview
Showing 5 of 51+ Security Engineer Jobs in Washington DC with Visa Sponsorship
See all 51+ Security Engineer Jobs in Washington DC with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Engineer Jobs in Washington DC with Visa Sponsorship.
Get Access To All JobsPosition Summary: Supports security operations, including continuous monitoring, vulnerability scanning, and incident response. Analyzes logs and security events, identifies risks, and supports remediation. Maintains security controls, manages vulnerabilities, and supports compliance and audits. Coordinates with technical teams and executes changes via ITSM while ensuring documentation and compliance. Supporting Deliverables: D-SEC-01 and D-SEC-02. D-SEC-03, D-SEC-04, and D-SEC-05. D-SEC-06. The role works in an enterprise hosting environment and requires practical capability in security operations support; continuous monitoring.
What You Will Be Responsible For:
- Supports security operations, including continuous monitoring, vulnerability scanning, and incident response. Analyzes logs and security events, identifies risks, and supports remediation.
- Maintains security controls, manages vulnerabilities, and supports compliance and audits. Coordinates with technical teams and executes changes via ITSM while ensuring documentation and compliance.
- Supporting Deliverables: D-SEC-01 and D-SEC-02. D-SEC-03, D-SEC-04, and D-SEC-05. D-SEC-06.
Core Skills You Need on Day One:
- Security operations support
- Continuous monitoring
- Vulnerability scanning and management
- Incident response
- Security tool administration
- Log analysis
- Risk identification and remediation
- Security controls and compliance frameworks
How the Role Operates:
- Use ITIL-aligned ITSM processes for incidents, changes, configuration tracking, approvals, and operational documentation.
- Keep system/configuration records, technical documentation, status information, and implementation details accurate and current.
- Monitor service/system performance, identify trends or risks, and take or recommend corrective action before issues affect service delivery.
What Success Looks Like:
- Security events and vulnerabilities are identified, analyzed, documented, and driven to remediation.
- Security controls and monitoring remain operational and evidence is available for compliance and audit needs.
- Changes and remediation actions are coordinated with technical teams through approved ITSM processes.
Deliverables You Will Support
Your responsibility: Provide accurate operational/technical inputs, maintain supporting records, and complete assigned sections or artifacts early enough for internal quality review and Government submission.
- D-SEC-01 – Monthly Security Compliance & Vulnerability Report: Report vulnerability scan results, remediation status against policy timelines, endpoint-security status, and security-incident summary. Timing: First day of each month.
- D-SEC-02 – Security Incident Report: Document the event, affected systems, response actions, and recommendations after a declared security incident. Timing: Within 24 hours of incident closure.
- D-SEC-03 – Privileged Access Management (PAM) Report: Audit Enterprise Password Vault use, privileged-account onboarding, and access-review status. Timing: First day of each quarter.
- D-SEC-04 – Baseline Configuration Drift Report: Identify production-system deviations from approved configuration baselines. Timing: Semi-annually.
- D-SEC-05 – Flaw Remediation Compliance Summary: Verify successful execution of security patches and vulnerability fixes across the enterprise. Timing: First day of each quarter.
- D-SEC-06 – System Security Plan (SSP) and Customer Responsibility Matrix: Maintain the master security document covering system architecture, control implementation, and ownership of security controls. Timing: Initial delivery 60 days after award; annual update.
Candidate Profile:
- Hands-on experience performing the core responsibilities and using the technologies/processes identified above in an enterprise IT environment.
- Able to work independently on assigned activities while coordinating effectively across engineering, operations, service management, and program teams.
- Strong troubleshooting, documentation, communication, and follow-through skills; comfortable working in structured change and compliance environments.
About Our Company: 22nd Century Technologies, Inc. (TSCTI) is a leading IT Services Integrator and Workforce Solutions provider, serving the public and private sectors since 1997. As a Certified National Minority Business Enterprise (MBE), TSCTI has built a nationwide workforce of 6,000+ professionals, including 600+ Cybersecurity Subject Matter Experts (SMEs), supporting clients across all 50 U.S. states, Canada, and Mexico. With 14 regional offices and headquarters in McLean, Virginia, TSCTI delivers mission-critical technology, workforce, and managed services solutions across Federal, Department of Defense (DoD), State, Local, Education, Healthcare, and Commercial markets.
Federal & Defense: TSCTI supports 500+ Federal projects and 160 DoD contracts, serving 14 of the 15 Federal Executive Departments and 37 additional Federal agencies. Our Federal capabilities span IT modernization, cybersecurity, cloud, digital transformation, infrastructure, application development and modernization, managed services, and workforce solutions.
State, Local & Education (SLED): TSCTI supports government and educational organizations nationwide, with 350+ SLED projects, serving all 50 states, 98 counties, 105 cities, 92 quasi-government organizations, and 37 school districts. Our services support critical areas including public safety, healthcare, education, transportation, justice, human services, finance, cybersecurity, and digital transformation.
Commercial: TSCTI has significantly expanded its private-sector presence and currently supports 80+ Fortune 500 and other commercial clients, providing technology, digital transformation, cloud, cybersecurity, infrastructure, managed services, and workforce solutions.
Quality, Security & Compliance: Our delivery organization follows mature, industry-recognized processes and certifications, including CMMI Level 3 for Development and Services, ISO 9001, ISO 20000, and ISO 27001, supporting our commitment to quality, security, reliability, and operational excellence.
Awards & Recognition: TSCTI has been recognized for business growth, technology excellence, customer service, diversity, and workplace excellence, including recognition by Forbes as a Best Company to Work For, America's Best Large Employers, America's Greatest Workplaces for Diversity by Newsweek, Inc. 5000 recognition, CRN Fast Growth 150, CRN Solution Provider 500, NVTC Tech 100, CIO Review, Virginia Values Veterans (V3), and recognition from the State of Maryland for Outstanding Services during the 2020 Presidential Election.
Today, TSCTI combines technology, cybersecurity, AI and innovation, digital transformation, cloud, IT infrastructure, managed services, and workforce solutions to help government agencies, businesses, and communities solve complex challenges and deliver better outcomes. TSCTI's current portfolio represents $3B+ in award value and a growing nationwide presence.
Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.
Position Summary: Supports security operations, including continuous monitoring, vulnerability scanning, and incident response. Analyzes logs and security events, identifies risks, and supports remediation. Maintains security controls, manages vulnerabilities, and supports compliance and audits. Coordinates with technical teams and executes changes via ITSM while ensuring documentation and compliance. Supporting Deliverables: D-SEC-01 and D-SEC-02. D-SEC-03, D-SEC-04, and D-SEC-05. D-SEC-06. The role works in an enterprise hosting environment and requires practical capability in security operations support; continuous monitoring.
What You Will Be Responsible For:
- Supports security operations, including continuous monitoring, vulnerability scanning, and incident response. Analyzes logs and security events, identifies risks, and supports remediation.
- Maintains security controls, manages vulnerabilities, and supports compliance and audits. Coordinates with technical teams and executes changes via ITSM while ensuring documentation and compliance.
- Supporting Deliverables: D-SEC-01 and D-SEC-02. D-SEC-03, D-SEC-04, and D-SEC-05. D-SEC-06.
Core Skills You Need on Day One:
- Security operations support
- Continuous monitoring
- Vulnerability scanning and management
- Incident response
- Security tool administration
- Log analysis
- Risk identification and remediation
- Security controls and compliance frameworks
How the Role Operates:
- Use ITIL-aligned ITSM processes for incidents, changes, configuration tracking, approvals, and operational documentation.
- Keep system/configuration records, technical documentation, status information, and implementation details accurate and current.
- Monitor service/system performance, identify trends or risks, and take or recommend corrective action before issues affect service delivery.
What Success Looks Like:
- Security events and vulnerabilities are identified, analyzed, documented, and driven to remediation.
- Security controls and monitoring remain operational and evidence is available for compliance and audit needs.
- Changes and remediation actions are coordinated with technical teams through approved ITSM processes.
Deliverables You Will Support
Your responsibility: Provide accurate operational/technical inputs, maintain supporting records, and complete assigned sections or artifacts early enough for internal quality review and Government submission.
- D-SEC-01 – Monthly Security Compliance & Vulnerability Report: Report vulnerability scan results, remediation status against policy timelines, endpoint-security status, and security-incident summary. Timing: First day of each month.
- D-SEC-02 – Security Incident Report: Document the event, affected systems, response actions, and recommendations after a declared security incident. Timing: Within 24 hours of incident closure.
- D-SEC-03 – Privileged Access Management (PAM) Report: Audit Enterprise Password Vault use, privileged-account onboarding, and access-review status. Timing: First day of each quarter.
- D-SEC-04 – Baseline Configuration Drift Report: Identify production-system deviations from approved configuration baselines. Timing: Semi-annually.
- D-SEC-05 – Flaw Remediation Compliance Summary: Verify successful execution of security patches and vulnerability fixes across the enterprise. Timing: First day of each quarter.
- D-SEC-06 – System Security Plan (SSP) and Customer Responsibility Matrix: Maintain the master security document covering system architecture, control implementation, and ownership of security controls. Timing: Initial delivery 60 days after award; annual update.
Candidate Profile:
- Hands-on experience performing the core responsibilities and using the technologies/processes identified above in an enterprise IT environment.
- Able to work independently on assigned activities while coordinating effectively across engineering, operations, service management, and program teams.
- Strong troubleshooting, documentation, communication, and follow-through skills; comfortable working in structured change and compliance environments.
About Our Company: 22nd Century Technologies, Inc. (TSCTI) is a leading IT Services Integrator and Workforce Solutions provider, serving the public and private sectors since 1997. As a Certified National Minority Business Enterprise (MBE), TSCTI has built a nationwide workforce of 6,000+ professionals, including 600+ Cybersecurity Subject Matter Experts (SMEs), supporting clients across all 50 U.S. states, Canada, and Mexico. With 14 regional offices and headquarters in McLean, Virginia, TSCTI delivers mission-critical technology, workforce, and managed services solutions across Federal, Department of Defense (DoD), State, Local, Education, Healthcare, and Commercial markets.
Federal & Defense: TSCTI supports 500+ Federal projects and 160 DoD contracts, serving 14 of the 15 Federal Executive Departments and 37 additional Federal agencies. Our Federal capabilities span IT modernization, cybersecurity, cloud, digital transformation, infrastructure, application development and modernization, managed services, and workforce solutions.
State, Local & Education (SLED): TSCTI supports government and educational organizations nationwide, with 350+ SLED projects, serving all 50 states, 98 counties, 105 cities, 92 quasi-government organizations, and 37 school districts. Our services support critical areas including public safety, healthcare, education, transportation, justice, human services, finance, cybersecurity, and digital transformation.
Commercial: TSCTI has significantly expanded its private-sector presence and currently supports 80+ Fortune 500 and other commercial clients, providing technology, digital transformation, cloud, cybersecurity, infrastructure, managed services, and workforce solutions.
Quality, Security & Compliance: Our delivery organization follows mature, industry-recognized processes and certifications, including CMMI Level 3 for Development and Services, ISO 9001, ISO 20000, and ISO 27001, supporting our commitment to quality, security, reliability, and operational excellence.
Awards & Recognition: TSCTI has been recognized for business growth, technology excellence, customer service, diversity, and workplace excellence, including recognition by Forbes as a Best Company to Work For, America's Best Large Employers, America's Greatest Workplaces for Diversity by Newsweek, Inc. 5000 recognition, CRN Fast Growth 150, CRN Solution Provider 500, NVTC Tech 100, CIO Review, Virginia Values Veterans (V3), and recognition from the State of Maryland for Outstanding Services during the 2020 Presidential Election.
Today, TSCTI combines technology, cybersecurity, AI and innovation, digital transformation, cloud, IT infrastructure, managed services, and workforce solutions to help government agencies, businesses, and communities solve complex challenges and deliver better outcomes. TSCTI's current portfolio represents $3B+ in award value and a growing nationwide presence.
Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.
Security Engineer Job Roles in Washington DC
See all 51+ Security Engineer Jobs in Washington DC
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Security Engineer Jobs in Washington DCSecurity Engineer Jobs in Washington DC: Frequently Asked Questions
Which companies sponsor visas for security engineers in Washington DC?
Federal contractors and cybersecurity firms are the most active sponsors for security engineers in the DC area. Companies like Booz Allen Hamilton, Leidos, SAIC, Mandiant, and CrowdStrike have consistent H-1B visa filing histories for security engineering roles. Large technology firms with DC offices, including Microsoft and Amazon Web Services, also sponsor regularly. Defense-adjacent roles may have additional clearance requirements that affect eligibility for some international candidates.
Which visa types are most common for security engineer roles in Washington DC?
The H-1B is the most common visa category for security engineers in DC, as the role qualifies as a specialty occupation requiring a relevant bachelor's degree or higher in computer science, information security, or a related field. Candidates from Australia may qualify for the E-3 visa. Canadian and Mexican nationals can explore the TN visa under the computer systems analyst category, though the specific role title affects eligibility.
How to find security engineer visa sponsorship jobs in Washington DC?
Migrate Mate filters job listings specifically by visa sponsorship willingness, making it straightforward to identify security engineer roles in the DC metro area where employers are open to sponsoring. Because DC's market spans federal contractors, commercial cybersecurity firms, and technology companies, using a sponsorship-focused search like Migrate Mate saves significant time compared to manually reviewing postings that rarely disclose sponsorship status upfront.
Which areas in Washington DC have the most security engineer sponsorship jobs?
Most security engineer sponsorship activity in the DC metro area is concentrated in the broader National Capital Region rather than DC proper. Northern Virginia, particularly Tysons Corner, Reston, and the Route 28 corridor, hosts a high density of defense contractors and cybersecurity firms. Bethesda and Rockville in Maryland are also significant clusters, with many federal health and intelligence agency contractors based there.
Are there any DC-specific considerations for security engineers seeking visa sponsorship?
Security clearance requirements are a practical reality for many DC-area security engineer roles. Positions supporting federal agencies or defense contractors often require a Secret or Top Secret clearance, which is generally not available to non-US citizens or green card holders. This narrows the sponsorable pool to commercial or unclassified work, so focusing applications on firms with both cleared and non-cleared practices, such as major consulting firms, tends to produce more viable sponsorship opportunities.
What is the prevailing wage for sponsored security engineer jobs in Washington DC?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.