Security Engineering Manager Jobs in USA with Visa Sponsorship
Security Engineering Manager roles qualify as H-1B visa specialty occupations, making them strong candidates for employer visa sponsorship. Tech, finance, and defense sectors file LCAs regularly for this title. If you hold an F-1 OPT or STEM OPT authorization, you can start immediately while your employer prepares the H-1B visa petition. For detailed occupation requirements, see the O*NET profile.
Find Security Engineering Manager JobsOverview
Showing 5 of 3,942+ Security Engineering Manager jobs
See all 3,942+ Security Engineering Manager Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Engineering Manager roles.
Get Access To All JobsLocation: Dallas
Other locations: Anywhere in Region
Salary: Competitive
Date: Nov 10, 2026
Job description
Requisition ID: 1758225
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
About the Role
We are seeking a Senior Manager, Application Security & AI Engineering to lead the design, implementation, and transformation of secure software development and AI-enabled applications. This role will drive Secure-by-Design practices, enterprise threat modeling, DevSecOps, AI security, and GenAI governance across cloud-native and digital platforms. The role is grounded in how developers work today: in AI-assisted IDEs and agentic coding workflows, where security must be a native part of the authoring experience rather than a downstream gate.
Key Responsibilities
- Define and execute Application Security and AI Security strategy, architecture standards, and transformation roadmaps.
- Lead Secure Software Development Lifecycle (SSDLC) and DevSecOps initiatives across product and engineering organizations.
- Govern the use of AI coding assistants and autonomous coding agents across the SSDLC, defining sandboxing, credential scoping, tool-access boundaries, and review standards for AI-authored code.
- Shift security review in-line to the point of authorship, embedding automated and AI-assisted review in the IDE and in pull requests so developers receive high-confidence, fix-ready feedback as they write code.
- Address the risks introduced by AI-generated and prompt-driven development, including code provenance, hallucinated or typosquatted dependencies, and prompt injection reaching agents that hold repository or pipeline access.
- Establish and scale threat modeling programs using STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, attack trees, and abuse cases.
- Conduct security architecture reviews and risk assessments for applications, APIs, microservices, cloud services, and AI solutions.
- Design and oversee SAST, DAST, Software Composition Analysis, API Security, Container Security, and Cloud Security capabilities.
- Architect secure AI and GenAI solutions, including LLM applications, copilots, Retrieval-Augmented Generation platforms, and agentic AI systems.
- Develop controls for AI agents, autonomous workflows, model access, prompt security, data protection, guardrails, and responsible AI governance.
- Partner with engineering, product, cloud, data, and cyber teams to embed security throughout the development lifecycle.
- Mentor application security architects, AI engineers, DevSecOps professionals, and security consultants.
Required Qualifications
- 10+ years of experience in application security, software engineering, cloud security, AI engineering, or cybersecurity.
- Deep expertise in secure application architecture, threat modeling, vulnerability management, attack-path analysis, and Secure-by-Design principles.
- Experience leading enterprise-scale Application Security, DevSecOps, or secure engineering transformation programs.
- Strong understanding of cloud-native architectures, APIs, microservices, containers, and AI/GenAI technologies.
- Current, hands-on experience building software with agentic development tools such as Cursor, Claude Code, and GitHub Copilot, including how to configure and secure them for enterprise use.
- Excellent leadership, executive communication, client-facing, and stakeholder management capabilities.
Preferred Skills & Technologies
- Threat Modeling: STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, threat-modeling-as-code, and automated threat modeling integrated into the delivery pipeline.
- Application Security: Semgrep, CodeQL, Snyk, reachability-based software composition analysis, Burp Suite, and the OWASP Top 10 for web, API, and LLM applications.
- Cloud & DevSecOps: Azure, AWS, Google Cloud, Kubernetes, Terraform, GitHub Actions, GitLab CI, and Azure DevOps, with policy-as-code enforcement using OPA or Kyverno.
- AI & GenAI: Azure AI Foundry, OpenAI, Anthropic, Vertex AI, Amazon Bedrock, LangGraph, OpenAI Agents SDK, Claude Agent SDK, and the Model Context Protocol.
- AI-Assisted Development: Cursor, Claude Code, GitHub Copilot, and OpenAI Codex, including agent rules and context files, Model Context Protocol tooling, agent sandboxing, and in-line security review workflows.
- AI Security: AI threat modeling, red teaming, prompt-injection testing, RAG security, agent security, model risk, guardrails, and responsible AI governance.
Preferred Certifications
CISSP, CSSLP, CCSP, CISM, GWAPT, CKS, and relevant Microsoft, AWS, Google Cloud, AI Security, or Responsible AI certifications.
What You'll Bring
A passion for building secure digital products and AI-powered solutions. You will help organizations reduce risk, accelerate innovation, and enable trusted AI adoption through strong threat modeling, secure engineering practices, and modern application security capabilities.
Differentiator: Day-to-day, hands-on experience with agentic development tools, particularly Cursor and Claude Code alongside with experience leading enterprise Secure AI SDLC, AI Red Teaming, and AI Governance programs.
What we offer you
At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.
- We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job is:
- New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $185,800 to $385,700
- Bay Area California offices – $193,500 to $401,600
- All other offices locations in the US, including Sacramento – $154,700 to $353,500
- Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
Are you ready to shape your future with confidence? Apply today.
- To make the most of your application experience, please limit yourself to two applications within a six-month period.
- EY accepts applications for this position on an on-going basis.
- For those living in California, please click here for additional information.
- At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
All in to shape the future with confidence.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.
Location: Dallas
Other locations: Anywhere in Region
Salary: Competitive
Date: Nov 10, 2026
Job description
Requisition ID: 1758225
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
About the Role
We are seeking a Senior Manager, Application Security & AI Engineering to lead the design, implementation, and transformation of secure software development and AI-enabled applications. This role will drive Secure-by-Design practices, enterprise threat modeling, DevSecOps, AI security, and GenAI governance across cloud-native and digital platforms. The role is grounded in how developers work today: in AI-assisted IDEs and agentic coding workflows, where security must be a native part of the authoring experience rather than a downstream gate.
Key Responsibilities
- Define and execute Application Security and AI Security strategy, architecture standards, and transformation roadmaps.
- Lead Secure Software Development Lifecycle (SSDLC) and DevSecOps initiatives across product and engineering organizations.
- Govern the use of AI coding assistants and autonomous coding agents across the SSDLC, defining sandboxing, credential scoping, tool-access boundaries, and review standards for AI-authored code.
- Shift security review in-line to the point of authorship, embedding automated and AI-assisted review in the IDE and in pull requests so developers receive high-confidence, fix-ready feedback as they write code.
- Address the risks introduced by AI-generated and prompt-driven development, including code provenance, hallucinated or typosquatted dependencies, and prompt injection reaching agents that hold repository or pipeline access.
- Establish and scale threat modeling programs using STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, attack trees, and abuse cases.
- Conduct security architecture reviews and risk assessments for applications, APIs, microservices, cloud services, and AI solutions.
- Design and oversee SAST, DAST, Software Composition Analysis, API Security, Container Security, and Cloud Security capabilities.
- Architect secure AI and GenAI solutions, including LLM applications, copilots, Retrieval-Augmented Generation platforms, and agentic AI systems.
- Develop controls for AI agents, autonomous workflows, model access, prompt security, data protection, guardrails, and responsible AI governance.
- Partner with engineering, product, cloud, data, and cyber teams to embed security throughout the development lifecycle.
- Mentor application security architects, AI engineers, DevSecOps professionals, and security consultants.
Required Qualifications
- 10+ years of experience in application security, software engineering, cloud security, AI engineering, or cybersecurity.
- Deep expertise in secure application architecture, threat modeling, vulnerability management, attack-path analysis, and Secure-by-Design principles.
- Experience leading enterprise-scale Application Security, DevSecOps, or secure engineering transformation programs.
- Strong understanding of cloud-native architectures, APIs, microservices, containers, and AI/GenAI technologies.
- Current, hands-on experience building software with agentic development tools such as Cursor, Claude Code, and GitHub Copilot, including how to configure and secure them for enterprise use.
- Excellent leadership, executive communication, client-facing, and stakeholder management capabilities.
Preferred Skills & Technologies
- Threat Modeling: STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, threat-modeling-as-code, and automated threat modeling integrated into the delivery pipeline.
- Application Security: Semgrep, CodeQL, Snyk, reachability-based software composition analysis, Burp Suite, and the OWASP Top 10 for web, API, and LLM applications.
- Cloud & DevSecOps: Azure, AWS, Google Cloud, Kubernetes, Terraform, GitHub Actions, GitLab CI, and Azure DevOps, with policy-as-code enforcement using OPA or Kyverno.
- AI & GenAI: Azure AI Foundry, OpenAI, Anthropic, Vertex AI, Amazon Bedrock, LangGraph, OpenAI Agents SDK, Claude Agent SDK, and the Model Context Protocol.
- AI-Assisted Development: Cursor, Claude Code, GitHub Copilot, and OpenAI Codex, including agent rules and context files, Model Context Protocol tooling, agent sandboxing, and in-line security review workflows.
- AI Security: AI threat modeling, red teaming, prompt-injection testing, RAG security, agent security, model risk, guardrails, and responsible AI governance.
Preferred Certifications
CISSP, CSSLP, CCSP, CISM, GWAPT, CKS, and relevant Microsoft, AWS, Google Cloud, AI Security, or Responsible AI certifications.
What You'll Bring
A passion for building secure digital products and AI-powered solutions. You will help organizations reduce risk, accelerate innovation, and enable trusted AI adoption through strong threat modeling, secure engineering practices, and modern application security capabilities.
Differentiator: Day-to-day, hands-on experience with agentic development tools, particularly Cursor and Claude Code alongside with experience leading enterprise Secure AI SDLC, AI Red Teaming, and AI Governance programs.
What we offer you
At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.
- We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job is:
- New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $185,800 to $385,700
- Bay Area California offices – $193,500 to $401,600
- All other offices locations in the US, including Sacramento – $154,700 to $353,500
- Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
Are you ready to shape your future with confidence? Apply today.
- To make the most of your application experience, please limit yourself to two applications within a six-month period.
- EY accepts applications for this position on an on-going basis.
- For those living in California, please click here for additional information.
- At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
All in to shape the future with confidence.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.
See all 3,942+ Security Engineering Manager Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Engineering Manager roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Security Engineering Manager
Align your credentials to specialty occupation standards
USCIS requires a direct relationship between your degree field and the Security Engineering Manager role. A computer science, cybersecurity, or information systems degree maps cleanly. An unrelated degree needs supplemental coursework or a credential evaluation to close the gap.
Target employers with active LCA filing history
Use Migrate Mate to find employers who have filed Labor Condition Applications for security engineering roles. Verified LCA history tells you the company already understands the sponsorship process, cutting your risk of a drawn-out internal approval fight.
Benchmark your offer against OFLC prevailing wage levels
Before accepting an offer, run your job title, location, and experience level through the OFLC Wage Search. Your offered salary must meet the LCA prevailing wage, and Level II or Level III wages apply to most Security Engineering Manager positions.
Clarify STEM OPT E-Verify status before your start date
If you're transitioning from STEM OPT, your employer must be enrolled in E-Verify before your extension is approved. Security teams at smaller firms sometimes miss this. Confirm enrollment status during the offer stage, not after you've signed.
Treat the specialty occupation letter as a filing asset
Security Engineering Manager titles sometimes draw USCIS Requests for Evidence because "manager" implies general business functions. Ask your employer's attorney to prepare a detailed specialty occupation support letter that maps daily security architecture and engineering duties to your specific degree requirement.
Use O*NET to anchor your job description to visa requirements
Pull the O*NET occupation profile for Information Security Managers when reviewing your offer letter's duties list. If the written duties match the O*NET task set, the role is easier to defend as a specialty occupation during USCIS adjudication.
Frequently Asked Questions
Does a Security Engineering Manager role qualify as an H-1B specialty occupation?
Yes, in most cases. USCIS evaluates whether the role normally requires at least a bachelor's degree in a directly related field. Security Engineering Manager positions at technology, financial services, and defense firms routinely meet this standard because the work requires applied knowledge of computer science, cybersecurity architecture, or information systems. Roles where the manager title covers only general operations without technical engineering duties can draw scrutiny, so the job description matters.
What degree do I need to sponsor an H-1B for a Security Engineering Manager job?
USCIS looks for a bachelor's degree or higher in a field directly related to the role. Computer science, cybersecurity, information security, electrical engineering, and information systems are the most defensible fields. If your degree is in a less directly related discipline, a combination of education and progressive security engineering experience may satisfy the specialty occupation standard, but the employer's attorney will need to build that argument explicitly in the petition.
Which visa types are available to foreign nationals applying for Security Engineering Manager jobs?
The H-1B is the most common path for employer sponsorship. Australian citizens can use the E-3 visa, which has no lottery and a cap that has never been exhausted. Chilean nationals have the H-1B1 visa, and Canadian and Mexican nationals qualify under TN visa if the role fits the USMCA profession list for engineers or scientists. F-1 students can work under OPT or STEM OPT while an employer pursues H-1B sponsorship.
How do I find Security Engineering Manager roles where employers are open to sponsorship?
Migrate Mate lists employers with verified LCA filing history for security engineering roles, so you can focus your search on companies that have already committed to sponsoring this type of position. This saves time you'd otherwise spend applying to roles where the employer hasn't thought through the sponsorship process.
Can a Security Engineering Manager role qualify for a green card through PERM?
Yes. Most EB-2 and EB-3 green card paths for this role go through the PERM labor certification process, where the employer must demonstrate no qualified U.S. workers are available. Security engineering roles with specialized requirements in areas like cloud security architecture or zero-trust implementation tend to have defensible PERM cases. EB-2 requires an advanced degree or exceptional ability, while EB-3 covers skilled workers with two or more years of experience.
What is the prevailing wage requirement for sponsored Security Engineering Manager jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.