Security Consultant Jobs in USA with Visa Sponsorship
Security consultants are strong H-1B visa candidates when the role requires a bachelor's degree in cybersecurity, information systems, or a related field. Employers in defense, finance, and technology regularly sponsor, and clearance-eligible candidates attract particularly competitive offers. For detailed occupation requirements, see the O*NET profile.
Find Security Consultant JobsOverview
Showing 5 of 117+ Security Consultant jobs
See all 117+ Security Consultant Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Consultant roles.
Get Access To All JobsINTRODUCTION
Infosys Public Services is seeking a Cyber Security Analyst to join our team.
Summary:
Cyber Security Consultant with strong expertise in Governance, Risk and Compliance (GRC), NIST Risk Management Framework (RMF), Security Assessment and Authorization (SA&A), and Authorization to Operate (ATO) activities within U.S. federal, state, and local government environments. The consultant will assess security posture, conduct security and risk assessments, identify compliance gaps, develop and assess security controls, and support remediation and authorization activities aligned with FISMA, NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FedRAMP, CMMC, and applicable government security and privacy requirements. These frameworks are commonly used across federal agencies, federal systems, cloud services, and government contractors. The role will support creating ATO packages artefacts including - System Security Plans (SSP), Security Procedures, Security design artefacts, security risk assessments, Plans of Action and Milestones (POA&M). The consultant will collaborate with system owners, ISSOs, ISSMs, security architects, cloud and infrastructure teams, auditors/assessors, and government stakeholders to ensure security requirements are effectively implemented and maintained throughout the system lifecycle.
Key Responsibilities:
- Minimum 11 years of cybersecurity experience, with demonstrated experience supporting U.S. federal, state, local government, or regulated public-sector environments.
- Strong experience with NIST RMF, FISMA, Security Assessment and Authorization, ATO processes, NIST SP 800-53, NIST SP 800-171, IRS1075, CJIS, CMS MARS-E, HIPAA/HITECH, FedRAMP, security risk assessments, GRC, cloud security, Zero Trust, vulnerability management, security operations, and incident management.
- NIST describes RMF as encompassing preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Required Skills:
- NIST RMF & ATO: Experience supporting RMF lifecycle activities, security authorization, control assessment, authorization packages, and continuous monitoring.
- FISMA & Federal Compliance: Strong understanding of FISMA and associated NIST standards applicable to federal information systems.
- Security Control Implementation & Assessments: Experience implementing, assessing technical, operational, and management controls related to NIST 800-53, IRS1075, FISMA/FEDRAMP and documenting control effectiveness and deficiencies.
- Security Documentation: Experience developing SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation documents, and authorization artifacts.
- Cloud Security: Experience assessing security configurations and controls across Microsoft Azure, AWS, or other government cloud environments.
- Zero Trust: Experience applying Zero Trust principles across identity, endpoint, network, application, workload, and data security.
- Identity & Access Management (IAM): Experience with Architecture and implementation of IAM solutions, access governance.
- Security Operations: Experience with SIEM/SOAR SOC operations, security monitoring, threat detection, endpoint security, and operational security controls.
- Incident Management: Experience supporting incident triage, investigation, containment, remediation, recovery, reporting, and lessons learned.
- Vulnerability Management: Experience evaluating vulnerabilities, prioritizing risk, coordinating remediation, and maintaining vulnerability and POA&M tracking.
- Continuous Monitoring: Experience supporting ongoing security control monitoring, vulnerability assessment, configuration compliance, and risk reporting.
- Security Architecture: Ability to evaluate cloud, infrastructure, network, application, identity, and data architectures against government security requirements.
- Privacy & Data Protection: Experience supporting privacy assessments and security controls for sensitive government information, PII, and regulated data.
- Stakeholder Management: Ability to collaborate effectively with government stakeholders, System Owners, ISSOs, ISSMs, Authorizing Officials, assessors, auditors, and technical delivery teams.
- Candidate must possess at least 1 of the certifications - CISSP, CISM, CISA, CRISC, CCSP, GIAC, Microsoft Azure Security, or equivalent industry certifications are highly desirable.
Educational Requirements:
A Bachelor’s degree or foreign equivalent is required from an accredited institution. Will consider three years of progressive, relevant work experience instead of every year of education. Candidates who have completed a Master's degree program are strongly preferred.
The job entails sitting and working at a computer for extended periods. Should be able to communicate by telephone, email, or face-to-face. Travel may be required as per the job requirements.
The estimated annual compensation range for this role will be as follows:
In Rockville, MD: $118,776 to $221,065.
INTRODUCTION
Infosys Public Services is seeking a Cyber Security Analyst to join our team.
Summary:
Cyber Security Consultant with strong expertise in Governance, Risk and Compliance (GRC), NIST Risk Management Framework (RMF), Security Assessment and Authorization (SA&A), and Authorization to Operate (ATO) activities within U.S. federal, state, and local government environments. The consultant will assess security posture, conduct security and risk assessments, identify compliance gaps, develop and assess security controls, and support remediation and authorization activities aligned with FISMA, NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FedRAMP, CMMC, and applicable government security and privacy requirements. These frameworks are commonly used across federal agencies, federal systems, cloud services, and government contractors. The role will support creating ATO packages artefacts including - System Security Plans (SSP), Security Procedures, Security design artefacts, security risk assessments, Plans of Action and Milestones (POA&M). The consultant will collaborate with system owners, ISSOs, ISSMs, security architects, cloud and infrastructure teams, auditors/assessors, and government stakeholders to ensure security requirements are effectively implemented and maintained throughout the system lifecycle.
Key Responsibilities:
- Minimum 11 years of cybersecurity experience, with demonstrated experience supporting U.S. federal, state, local government, or regulated public-sector environments.
- Strong experience with NIST RMF, FISMA, Security Assessment and Authorization, ATO processes, NIST SP 800-53, NIST SP 800-171, IRS1075, CJIS, CMS MARS-E, HIPAA/HITECH, FedRAMP, security risk assessments, GRC, cloud security, Zero Trust, vulnerability management, security operations, and incident management.
- NIST describes RMF as encompassing preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Required Skills:
- NIST RMF & ATO: Experience supporting RMF lifecycle activities, security authorization, control assessment, authorization packages, and continuous monitoring.
- FISMA & Federal Compliance: Strong understanding of FISMA and associated NIST standards applicable to federal information systems.
- Security Control Implementation & Assessments: Experience implementing, assessing technical, operational, and management controls related to NIST 800-53, IRS1075, FISMA/FEDRAMP and documenting control effectiveness and deficiencies.
- Security Documentation: Experience developing SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation documents, and authorization artifacts.
- Cloud Security: Experience assessing security configurations and controls across Microsoft Azure, AWS, or other government cloud environments.
- Zero Trust: Experience applying Zero Trust principles across identity, endpoint, network, application, workload, and data security.
- Identity & Access Management (IAM): Experience with Architecture and implementation of IAM solutions, access governance.
- Security Operations: Experience with SIEM/SOAR SOC operations, security monitoring, threat detection, endpoint security, and operational security controls.
- Incident Management: Experience supporting incident triage, investigation, containment, remediation, recovery, reporting, and lessons learned.
- Vulnerability Management: Experience evaluating vulnerabilities, prioritizing risk, coordinating remediation, and maintaining vulnerability and POA&M tracking.
- Continuous Monitoring: Experience supporting ongoing security control monitoring, vulnerability assessment, configuration compliance, and risk reporting.
- Security Architecture: Ability to evaluate cloud, infrastructure, network, application, identity, and data architectures against government security requirements.
- Privacy & Data Protection: Experience supporting privacy assessments and security controls for sensitive government information, PII, and regulated data.
- Stakeholder Management: Ability to collaborate effectively with government stakeholders, System Owners, ISSOs, ISSMs, Authorizing Officials, assessors, auditors, and technical delivery teams.
- Candidate must possess at least 1 of the certifications - CISSP, CISM, CISA, CRISC, CCSP, GIAC, Microsoft Azure Security, or equivalent industry certifications are highly desirable.
Educational Requirements:
A Bachelor’s degree or foreign equivalent is required from an accredited institution. Will consider three years of progressive, relevant work experience instead of every year of education. Candidates who have completed a Master's degree program are strongly preferred.
The job entails sitting and working at a computer for extended periods. Should be able to communicate by telephone, email, or face-to-face. Travel may be required as per the job requirements.
The estimated annual compensation range for this role will be as follows:
In Rockville, MD: $118,776 to $221,065.
See all 117+ Security Consultant Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Consultant roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Security Consultant
Lead with your clearance status early
Security clearance eligibility is rare among international candidates. If you hold or are eligible for a clearance, mention it in your first outreach. Employers weigh this heavily and it directly offsets sponsorship hesitation for many hiring managers.
Target industries with established sponsorship track records
Defense contractors, financial institutions, and large technology firms sponsor security consultants far more consistently than smaller firms. Focus your search on employers with prior H-1B filing history rather than companies sponsoring for the first time.
Frame your degree field carefully in applications
H-1B specialty occupation requires a directly related degree. Cybersecurity, computer science, information assurance, and information systems are strong matches. A general business or unrelated degree weakens the petition even if your experience is strong.
Expect USCIS scrutiny on the specialty occupation question
Security consultant is a broad title. USCIS frequently issues RFEs arguing the role does not require a specific degree. Strong job descriptions that emphasize technical depth, not advisory work, significantly improve petition outcomes.
Use certifications to reinforce your petition
CISSP, CISM, CEH, and similar certifications do not replace a degree for H-1B purposes, but they strengthen the overall petition narrative. Include them prominently in your resume and ensure your employer references them in the support letter.
Browse verified sponsoring employers on Migrate Mate
Not every company willing to hire a security consultant will sponsor. Migrate Mate surfaces roles from employers with confirmed sponsorship history, saving time you would otherwise spend applying to positions that quietly exclude visa candidates.
Frequently Asked Questions
Does a security consultant role qualify for H-1B sponsorship?
It can, but it depends on how the role is defined. USCIS requires the position to be a specialty occupation, meaning it normally requires at least a bachelor's degree in a specific field. Security consultant roles that emphasize technical work in cybersecurity, risk architecture, or penetration testing qualify more reliably than broadly framed advisory positions. Employers should structure the job description to reflect technical degree requirements.
What degree do I need for a security consultant H-1B petition?
A bachelor's degree or higher in cybersecurity, computer science, information systems, information assurance, or a closely related field is the standard basis. Degrees in unrelated disciplines create specialty occupation problems even with years of relevant experience. If your degree field is adjacent rather than direct, a strong employer support letter and detailed job description become especially important to the petition.
How likely is an RFE for a security consultant H-1B petition?
RFE rates for security consultant and similar broadly titled roles are higher than for narrowly defined technical positions. USCIS has challenged whether consulting roles inherently require a specific degree. Petitions with detailed, technical job descriptions that specify required knowledge in areas like network security, cryptography, or compliance frameworks tend to fare better than those using generic language.
Can I find security consultant jobs with confirmed H-1B sponsorship?
Yes. Migrate Mate lists security consultant roles from employers with documented sponsorship history, so you can focus applications on companies that have already demonstrated willingness to sponsor. This matters because many job postings do not disclose sponsorship status upfront, and approaching the wrong employers wastes significant time during an already time-pressured job search.
Do defense contractor security consultant roles have different sponsorship rules?
Defense contractors can sponsor H-1B visas, but roles requiring a security clearance create a practical problem. Most clearances cannot be granted to non-US citizens or non-permanent residents, which means employers may sponsor your H-1B but cannot fully utilize you until you adjust status. Some contractors hire for clearance-eligible roles anticipating future sponsorship, but this is employer-specific and worth clarifying directly before applying.
What is the prevailing wage requirement for sponsored Security Consultant jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.