Product Security Engineer Jobs in USA with Visa Sponsorship
Product Security Engineers are highly sought after for H-1B visa and other work visa sponsorship due to critical cybersecurity skills shortages. The role typically qualifies as a specialty occupation with computer science, cybersecurity, or engineering degrees. Major tech companies and financial institutions actively sponsor for these positions. For detailed occupation requirements, see the O*NET profile.
Find Product Security Engineer JobsOverview
Showing 5 of 985+ Product Security Engineer jobs
See all 985+ Product Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Product Security Engineer roles.
Get Access To All JobsWant to secure the future of data management and AI/ML? At MongoDB we are transforming industries and empowering developers to build amazing AI/ML-powered apps that people and enterprises use every day. We are the leading modern data platform and the first database provider to IPO in over 20 years. Overall, the worldwide data management software market is massive (IDC forecasts it to be $138 billion by 2026!). Join our team and be at the forefront of innovation and creativity. This role can be based out of our Seattle office, New York office, or remotely in North America.
Who You Are
With a strong security engineering background, you’re looking for a role that gives you the freedom to increase MongoDB’s resonance with customers by strengthening our core database products. You’re passionate about solving hard security engineering problems while putting a strong emphasis on customer experience, leveraging your own significant experience. You enjoy collaborating with different teams to innovate and implement pragmatic solutions.
Who We Are
The MongoDB Product Security organization is a diverse collection of individuals working together to scale MongoDB’s security, both security of the products themselves and the security features we offer to customers. The team is responsible for the MongoDB Database Server (Community and Enterprise editions). The MongoDB Product Security organization works with software engineers to design, implement, and operate systems in a manner that protects customer data. It is a multidisciplinary team that covers product, software, cloud, infrastructure, and operational security concerns. The team does the following:
- Build a developer driven security program where there is tight integration with engineering artifacts, process, and tooling
- Use software architecture and coding patterns to reduce the impact of security issues
- Be security subject matter experts for our tech stack and products
Responsibilities
- You will take ownership, define strategy, and drive improvement for parts of our program such as fuzzing, threat modeling, secrets management, or container security
- You will support engineering teams when they respond to security issues, such as providing risk analysis and proof of concept
- Advocate for and contribute to complex security projects from inception through completion
- Drive architecture, patterns, and processes across Server Engineering that make security the easiest path
- Partner closely with engineering teams to design and implement security controls across our software and systems
- Research and POC new attacks against our systems. Plan and perform product security assessments including architecture review threat modeling, code review, pen testing and general security consulting to proactively build security controls
- Serve as a security subject matter expert for software security and architecture
- Educate the engineering org on security through CTFs, lunch-and-learns, and one-on-one mentorship
Requirements
- 3 years of experience in application security, software security, or product security
- Demonstrated experience in C++ programming, performing security assessments on low-level codebases, and implementing remediation strategies for memory-related security flaws such as buffer overflows and memory leaks
- Scripting experience and ability to contribute code back to our environments
- Comfortable leading threat modeling and being a security ambassador to other engineering teams
- Communicate complex technical issues in a simple manner that builds trust with a variety of audiences
- A strong sense of ownership and delivery
- Can facilitate a conversation rather than dominate it
- Skilled at providing collaborative, actionable feedback, not just a list of flaws
Don’t feel that you meet all of the requirements? We encourage you to apply anyway because studies have shown that some strong candidates may self-select out of the interview process prematurely. We have a diverse, inclusive, equitable, and high-performing environment at MongoDB and want to continuously improve our ability to deliver for customers.
Nice to Haves
- Subject matter expertise in database security, or data security
- Knowledge of database engines, database internals, or applied cryptography
- Experience contributing or partnering with security researchers to identify vulnerabilities that eventually are published CVEs or administrative responsibilities of a CNA
Success in this role means
- Seeing projects through from conception to completion in order to deliver new services or capabilities for the team
- Establishing yourself as a go-to person for discussing security topics
About MongoDB
MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the data platform for the AI era, enabling builders to create, transform, and disrupt industries with software. MongoDB’s unified data platform, the most widely available, globally distributed data platform on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud data platform and is available across AWS, Google Cloud, and Microsoft Azure. With offices worldwide and over 67,000 customers, including 75% of the Fortune 100 and AI-native startups, relying on MongoDB for their most important applications, we’re powering the next era of software. Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.
To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!
MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.
MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Req. ID: 2273508540
MongoDB’s base salary range for this role is posted below. Compensation at the time of offer is unique to each candidate and based on a variety of factors such as skill set, experience, qualifications, and work location. Salary is one part of MongoDB’s total compensation and benefits package. Other benefits for eligible employees may include: equity, participation in the employee stock purchase program, flexible paid time off, 20 weeks fully-paid gender-neutral parental leave, fertility and adoption assistance, 401(k) plan, mental health counseling, access to transgender-inclusive health insurance coverage, and health benefits offerings.
Please note, the base salary range listed below and the benefits in this paragraph are only applicable to U.S.-based candidates. MongoDB’s base salary range for this role in the U.S. is: $106,000—$209,000 USD
Want to secure the future of data management and AI/ML? At MongoDB we are transforming industries and empowering developers to build amazing AI/ML-powered apps that people and enterprises use every day. We are the leading modern data platform and the first database provider to IPO in over 20 years. Overall, the worldwide data management software market is massive (IDC forecasts it to be $138 billion by 2026!). Join our team and be at the forefront of innovation and creativity. This role can be based out of our Seattle office, New York office, or remotely in North America.
Who You Are
With a strong security engineering background, you’re looking for a role that gives you the freedom to increase MongoDB’s resonance with customers by strengthening our core database products. You’re passionate about solving hard security engineering problems while putting a strong emphasis on customer experience, leveraging your own significant experience. You enjoy collaborating with different teams to innovate and implement pragmatic solutions.
Who We Are
The MongoDB Product Security organization is a diverse collection of individuals working together to scale MongoDB’s security, both security of the products themselves and the security features we offer to customers. The team is responsible for the MongoDB Database Server (Community and Enterprise editions). The MongoDB Product Security organization works with software engineers to design, implement, and operate systems in a manner that protects customer data. It is a multidisciplinary team that covers product, software, cloud, infrastructure, and operational security concerns. The team does the following:
- Build a developer driven security program where there is tight integration with engineering artifacts, process, and tooling
- Use software architecture and coding patterns to reduce the impact of security issues
- Be security subject matter experts for our tech stack and products
Responsibilities
- You will take ownership, define strategy, and drive improvement for parts of our program such as fuzzing, threat modeling, secrets management, or container security
- You will support engineering teams when they respond to security issues, such as providing risk analysis and proof of concept
- Advocate for and contribute to complex security projects from inception through completion
- Drive architecture, patterns, and processes across Server Engineering that make security the easiest path
- Partner closely with engineering teams to design and implement security controls across our software and systems
- Research and POC new attacks against our systems. Plan and perform product security assessments including architecture review threat modeling, code review, pen testing and general security consulting to proactively build security controls
- Serve as a security subject matter expert for software security and architecture
- Educate the engineering org on security through CTFs, lunch-and-learns, and one-on-one mentorship
Requirements
- 3 years of experience in application security, software security, or product security
- Demonstrated experience in C++ programming, performing security assessments on low-level codebases, and implementing remediation strategies for memory-related security flaws such as buffer overflows and memory leaks
- Scripting experience and ability to contribute code back to our environments
- Comfortable leading threat modeling and being a security ambassador to other engineering teams
- Communicate complex technical issues in a simple manner that builds trust with a variety of audiences
- A strong sense of ownership and delivery
- Can facilitate a conversation rather than dominate it
- Skilled at providing collaborative, actionable feedback, not just a list of flaws
Don’t feel that you meet all of the requirements? We encourage you to apply anyway because studies have shown that some strong candidates may self-select out of the interview process prematurely. We have a diverse, inclusive, equitable, and high-performing environment at MongoDB and want to continuously improve our ability to deliver for customers.
Nice to Haves
- Subject matter expertise in database security, or data security
- Knowledge of database engines, database internals, or applied cryptography
- Experience contributing or partnering with security researchers to identify vulnerabilities that eventually are published CVEs or administrative responsibilities of a CNA
Success in this role means
- Seeing projects through from conception to completion in order to deliver new services or capabilities for the team
- Establishing yourself as a go-to person for discussing security topics
About MongoDB
MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the data platform for the AI era, enabling builders to create, transform, and disrupt industries with software. MongoDB’s unified data platform, the most widely available, globally distributed data platform on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud data platform and is available across AWS, Google Cloud, and Microsoft Azure. With offices worldwide and over 67,000 customers, including 75% of the Fortune 100 and AI-native startups, relying on MongoDB for their most important applications, we’re powering the next era of software. Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.
To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!
MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.
MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Req. ID: 2273508540
MongoDB’s base salary range for this role is posted below. Compensation at the time of offer is unique to each candidate and based on a variety of factors such as skill set, experience, qualifications, and work location. Salary is one part of MongoDB’s total compensation and benefits package. Other benefits for eligible employees may include: equity, participation in the employee stock purchase program, flexible paid time off, 20 weeks fully-paid gender-neutral parental leave, fertility and adoption assistance, 401(k) plan, mental health counseling, access to transgender-inclusive health insurance coverage, and health benefits offerings.
Please note, the base salary range listed below and the benefits in this paragraph are only applicable to U.S.-based candidates. MongoDB’s base salary range for this role in the U.S. is: $106,000—$209,000 USD
See all 985+ Product Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Product Security Engineer roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Product Security Engineer
Highlight security certifications alongside your degree
CISSP, CISM, or CEH certifications strengthen your specialty occupation case. Immigration officers recognize these as evidence of specialized cybersecurity knowledge beyond general IT skills.
Target companies with existing security compliance programs
Organizations under SOX, PCI DSS, or HIPAA regulations have documented needs for security engineers. This regulatory requirement supports the business necessity argument for sponsorship.
Emphasize threat modeling and vulnerability assessment experience
Specific technical skills like penetration testing, code review, and security architecture differentiate you from general software engineers when justifying the specialized role.
Focus on fintech, healthcare, and defense contractors
Industries handling sensitive data have higher sponsorship rates for security roles. These sectors often have dedicated immigration budgets due to talent scarcity and compliance requirements.
Document experience with security frameworks and standards
Knowledge of NIST, ISO 27001, or OWASP frameworks demonstrates specialized expertise. Include specific implementations you've led or contributed to in previous roles.
Consider cybersecurity consulting firms as entry points
Security consulting companies frequently sponsor international talent and offer client exposure. This path can lead to direct hire opportunities with larger organizations later.
Frequently Asked Questions
Do I need a cybersecurity degree for H-1B sponsorship as a Product Security Engineer?
No, you don't need a cybersecurity-specific degree. Computer Science, Information Technology, Engineering, or related technical degrees typically qualify. The key is demonstrating that your education and experience combine to create specialized knowledge in product security. Relevant certifications like CISSP or security bootcamps can strengthen applications with non-security degrees.
What makes Product Security Engineer a specialty occupation for visa purposes?
Product Security Engineers require specialized knowledge of secure coding practices, threat modeling, vulnerability assessment, and security architecture that goes beyond general software development. The role demands understanding of cryptography, compliance frameworks, and security testing methodologies. This specialized skill set typically requires at least a bachelor's degree in a technical field plus security-specific training.
Which visa types work best for Product Security Engineers?
H-1B visa is most common due to the technical degree requirement and specialty occupation nature. O-1 visa may apply for senior engineers with significant security research, publications, or recognition in cybersecurity. E-3 visa works for Australians, TN visa for Canadians with qualifying degrees. L-1 visa applies if transferring from an international office of the same company with security responsibilities.
How do security clearance requirements affect visa sponsorship?
Many government contractors and defense companies require security clearances that are only available to U.S. citizens or permanent residents. This limits H-1B opportunities in defense and classified work. However, commercial cybersecurity roles, fintech, healthcare, and private sector companies actively sponsor without clearance requirements. Focus on commercial security positions for better sponsorship prospects.
What's the approval rate for H-1B petitions in cybersecurity roles?
Cybersecurity roles, including Product Security Engineer, generally see higher approval rates than average due to clear specialty occupation requirements and documented talent shortages. USCIS recognizes the technical nature and degree requirements. However, approval depends on proper documentation of job duties, degree relevance, and employer's business need. Working with experienced immigration attorneys improves success rates significantly.
How to find Product Security Engineer jobs with visa sponsorship?
To find Product Security Engineer positions with visa sponsorship, use Migrate Mate, which specializes in connecting international tech professionals with sponsoring employers. Focus on technology companies, fintech firms, and cybersecurity startups that commonly sponsor H-1B, TN, and O-1 visas for security roles. These employers actively seek Product Security Engineers to protect their software and infrastructure from threats.
What is the prevailing wage requirement for sponsored Product Security Engineer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.