Security Analyst Jobs in USA with Visa Sponsorship
Security analyst roles, particularly in cybersecurity, are strong candidates for H-1B visa sponsorship given the massive talent shortage in this field. Tech companies, financial institutions, consulting firms, and government contractors regularly sponsor for these positions. A degree in cybersecurity, computer science, or information systems is typically required. The high demand relative to supply means employers are more willing to navigate the sponsorship process. For detailed occupation requirements, see the O*NET profile.
Find Security Analyst JobsOverview
Showing 5 of 538+ Security Analyst jobs
See all 538+ Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Analyst roles.
Get Access To All JobsJob Title:
Senior Security Analyst
Department:
OTDI | Governance and Risk Management
Senior Security Analyst Position Summary
The Senior Security Analyst is a high-impact, specialized position within The Ohio State University’s Office of Technology and Digital Innovation. This role is responsible for designing, managing, and evolving the comprehensive information security and privacy framework across the university and medical center. Operating with a high degree of autonomy, the Senior Security Analyst will apply advanced industry knowledge to solve highly complex problems, develop new risk models, establish precedents that safeguard the university's academic, research, and administrative environments, and lead technical focus groups to determine the applicability of industry standards to university business.
Key Responsibilities
- Own and operate the university’s Information Security and Privacy Control Requirements (ISPCR), ensuring alignment with institutional goals.
- Map institutional policies and controls to industry standards and regulatory requirements, such as NIST SP 800-53, NIST SP 800-171, CIS Benchmarks, HIPAA, FERPA, GLBA, and PCI-DSS.
- Develop, refine, and implement new compliance practices, processes, maturity models, and key performance metrics to measure framework effectiveness over time.
- Lead highly complex, large-scope risk assessment initiatives that have a significant and long-term impact on the university’s risk posture.
- Scope, execute, and oversee Tier 1, Tier 2, and Tier 3 risk assessments, evaluating critical campus infrastructure, cloud environments, third-party vendors, and research data environments.
- Provide actionable, technically sound mitigation strategies to system owners, researchers, and technical teams to remediate identified gaps.
- Provide guidance, mentorship, and technical oversight to less experienced colleagues across the distributed university IT and security organizations.
- Convey difficult, highly complex, or sensitive risk information to diverse campus stakeholders and leadership, from technical system administrators to non-technical academic leadership.
- Facilitate productive dialogue and use advanced communication skills to persuade others to adopt secure practices and consider alternative risk-treatment options.
Required Education & Experience
- Bachelor’s degree in information technology, cyber security, computer science, or a related field (or equivalent professional experience).
- Minimum of 6 years of direct experience in information security governance, risk, and compliance.
- Full technology stack knowledge – broad understanding and ability to explain identity and access management (IAM), server, networking, application development, and database concepts.
Preferred Education & Experience
- 8 to 12 years of relevant governance, risk, and compliance (GRC) experience, ideally within a higher education, academic medical center, or highly decentralized corporate environment.
- Advanced degree (master’s or equivalent) in a relevant technical or business field.
- Active professional certifications such as CISA, CRISC, CISM, CISSP, or equivalent specialized GRC certifications.
- Deep specialization in NIST SP 800-53 and HIPAA Security/Privacy Rules. Thorough understanding of how these controls apply to diverse IT environments (on-premises, cloud, SaaS).
- Full technology stack experience – provides expert guidance to securely implement IAM, server, networking, application development, and database services.
Additional Information:
The salary range for this position is $103,000 - $134,500 and the offer for this position will be based on internal equity and the candidate's qualifications.
Location:
Mount Hall (0311)
Position Type:
Regular
Scheduled Hours:
40
Shift:
First Shift
Final candidates are subject to successful completion of a background check. A drug screen or physical may be required during the post offer process.
Thank you for your interest in positions at The Ohio State University and Wexner Medical Center. Once you have applied, the most updated information on the status of your application can be found by visiting the Candidate Home section of this site. Please view your submitted applications by logging in and reviewing your status. For answers to additional questions please review the frequently asked questions.
The university is an equal opportunity employer, including veterans and disability.
Job Title:
Senior Security Analyst
Department:
OTDI | Governance and Risk Management
Senior Security Analyst Position Summary
The Senior Security Analyst is a high-impact, specialized position within The Ohio State University’s Office of Technology and Digital Innovation. This role is responsible for designing, managing, and evolving the comprehensive information security and privacy framework across the university and medical center. Operating with a high degree of autonomy, the Senior Security Analyst will apply advanced industry knowledge to solve highly complex problems, develop new risk models, establish precedents that safeguard the university's academic, research, and administrative environments, and lead technical focus groups to determine the applicability of industry standards to university business.
Key Responsibilities
- Own and operate the university’s Information Security and Privacy Control Requirements (ISPCR), ensuring alignment with institutional goals.
- Map institutional policies and controls to industry standards and regulatory requirements, such as NIST SP 800-53, NIST SP 800-171, CIS Benchmarks, HIPAA, FERPA, GLBA, and PCI-DSS.
- Develop, refine, and implement new compliance practices, processes, maturity models, and key performance metrics to measure framework effectiveness over time.
- Lead highly complex, large-scope risk assessment initiatives that have a significant and long-term impact on the university’s risk posture.
- Scope, execute, and oversee Tier 1, Tier 2, and Tier 3 risk assessments, evaluating critical campus infrastructure, cloud environments, third-party vendors, and research data environments.
- Provide actionable, technically sound mitigation strategies to system owners, researchers, and technical teams to remediate identified gaps.
- Provide guidance, mentorship, and technical oversight to less experienced colleagues across the distributed university IT and security organizations.
- Convey difficult, highly complex, or sensitive risk information to diverse campus stakeholders and leadership, from technical system administrators to non-technical academic leadership.
- Facilitate productive dialogue and use advanced communication skills to persuade others to adopt secure practices and consider alternative risk-treatment options.
Required Education & Experience
- Bachelor’s degree in information technology, cyber security, computer science, or a related field (or equivalent professional experience).
- Minimum of 6 years of direct experience in information security governance, risk, and compliance.
- Full technology stack knowledge – broad understanding and ability to explain identity and access management (IAM), server, networking, application development, and database concepts.
Preferred Education & Experience
- 8 to 12 years of relevant governance, risk, and compliance (GRC) experience, ideally within a higher education, academic medical center, or highly decentralized corporate environment.
- Advanced degree (master’s or equivalent) in a relevant technical or business field.
- Active professional certifications such as CISA, CRISC, CISM, CISSP, or equivalent specialized GRC certifications.
- Deep specialization in NIST SP 800-53 and HIPAA Security/Privacy Rules. Thorough understanding of how these controls apply to diverse IT environments (on-premises, cloud, SaaS).
- Full technology stack experience – provides expert guidance to securely implement IAM, server, networking, application development, and database services.
Additional Information:
The salary range for this position is $103,000 - $134,500 and the offer for this position will be based on internal equity and the candidate's qualifications.
Location:
Mount Hall (0311)
Position Type:
Regular
Scheduled Hours:
40
Shift:
First Shift
Final candidates are subject to successful completion of a background check. A drug screen or physical may be required during the post offer process.
Thank you for your interest in positions at The Ohio State University and Wexner Medical Center. Once you have applied, the most updated information on the status of your application can be found by visiting the Candidate Home section of this site. Please view your submitted applications by logging in and reviewing your status. For answers to additional questions please review the frequently asked questions.
The university is an equal opportunity employer, including veterans and disability.
See all 538+ Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Analyst roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Security Analyst
Earn foundational cybersecurity certifications
CompTIA Security+, CEH (Certified Ethical Hacker), or GIAC Security Essentials (GSEC) demonstrate baseline knowledge that U.S. employers expect. These certifications help establish that your role is a specialty occupation, which strengthens the H-1B petition for security-focused positions.
Target financial services and healthcare organizations
Banks like JPMorgan Chase, Goldman Sachs, and Citibank, along with healthcare systems and insurers, are required by regulation (SOX, HIPAA, PCI DSS) to maintain security teams. These organizations have large budgets for cybersecurity hiring and established immigration processes.
Develop SIEM expertise with industry-standard tools
Proficiency in Splunk, Microsoft Sentinel, CrowdStrike Falcon, or Palo Alto Cortex XSOAR is essential for most security analyst positions. Hands-on experience with threat detection, log analysis, and incident response using these platforms makes you immediately productive and harder to replace.
Use STEM OPT to build a security operations track record
Computer science and cybersecurity degrees qualify for the 24-month STEM OPT extension. The 36-month work authorization window gives you time to handle real incidents, build detection rules, and earn advanced certifications - all of which strengthen your case for employer-sponsored visa status.
Frequently Asked Questions
Can security analysts get H-1B visa sponsorship?
Yes. Information security analyst is classified under SOC code 15-1212 and is recognized as a specialty occupation requiring at least a bachelor's degree. The Bureau of Labor Statistics projects much faster than average growth for this field, and the cybersecurity talent shortage makes employers more willing to sponsor qualified candidates. Large enterprises, financial institutions, and managed security service providers are among the most active sponsors.
Do security analyst roles require a security clearance?
Not all security analyst positions require a clearance. The majority of private-sector security analyst roles - at banks, tech companies, healthcare organizations, and retailers - do not require government security clearances. Roles at defense contractors or in direct government support may require clearances that are only available to U.S. citizens and permanent residents.
What degree do I need for a security analyst H-1B petition?
A bachelor's degree in computer science, cybersecurity, information technology, or a related field is the standard requirement. Some petitions are approved with degrees in electrical engineering or mathematics combined with relevant cybersecurity experience and certifications. The key is demonstrating a direct relationship between your degree and the security analyst role described in the petition.
Is cybersecurity a STEM field for OPT purposes?
Yes. Most cybersecurity-related degree programs fall under STEM-designated CIP codes, including computer science, information security, and network administration. This qualifies graduates for the 24-month STEM OPT extension, providing up to 36 months of post-graduation work authorization. Verify that your specific program's CIP code is on the DHS STEM Designated Degree Program List.
How to find Security Analyst jobs with visa sponsorship?
To find Security Analyst jobs with visa sponsorship, use Migrate Mate, which specializes in connecting international candidates with sponsoring employers. Focus your search on technology companies, financial institutions, healthcare organizations, and government contractors who frequently sponsor H-1B visa, O-1 visa, and other work visas for cybersecurity professionals. These industries highly value security expertise and are more willing to handle sponsorship processes.
What is the prevailing wage requirement for sponsored Security Analyst jobs?
When a U.S. employer sponsors a foreign worker for a work visa, they are legally required to pay at least the "prevailing wage" — the average wage paid to workers in the same occupation, in the same geographic area, with similar experience. This is set by the Department of Labor to prevent employers from hiring foreign workers at below-market rates. The prevailing wage varies significantly by role, location, and experience level — for example, a security analyst in Texas will have a different prevailing wage than the same role in a smaller state. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search.