Specialist - Security Development & Engineering

Your Opportunity

Schwab remains committed to providing increased visibility to career growth opportunities and job requirements. This posting announcement is part of increased transparency and while all qualified applicants will be reviewed and considered, this organization has a preferred candidate identified for this role.

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location.

As a Cloud Security Automation Engineer, you will build and operate scalable security automation that strengthens Schwab's cybersecurity posture across AWS, Azure, GCP, and SaaS environments.

You will partner with Cloud Security Engineering, Cyber Operations, platform engineering, and development teams to deliver policy-as-code, cloud-native controls, operational monitoring, and reliable DevSecOps integrations. This hands-on role combines software engineering, security operations, and continuous improvement.

What You'll Do

Cloud Security Automation and Engineering

• Design, develop, test, deploy, and maintain fault-tolerant cloud security automation for CSPM, CWP, IAM, SSPM, CASB, CIEM, and related capabilities.
• Build resilient, maintainable services and integrations using cloud-native APIs, SDKs, event-driven patterns, and software engineering best practices.
• Implement standardized logging, monitoring, alerting, health checks, retries, graceful failure handling, and recovery capabilities for production automations.
• Automate compliance monitoring, remediation, reporting, and repetitive security processes to improve coverage and reduce manual effort.
• Support cloud security platform integrations, migrations, and modernization initiatives across AWS, Azure, GCP, and SaaS environments.

DevSecOps and Policy-as-Code

• Design and maintain Policy-as-Code and Security-as-Code controls within CI/CD pipelines and the software development lifecycle.
• Integrate infrastructure and configuration scanning into cloud build pipelines using tools such as Checkov, OPA, Sentinel, or comparable frameworks.
• Partner with development and infrastructure teams to shift security left through automated testing, actionable feedback, and deployment guardrails.
• Improve automation reliability through code review, version control, testing, release controls, monitoring, and continuous improvement.

Operational Reliability and On-Call Support

• Participate in the on-call rotation and provide production support for cloud security services and automations, including after-hours response when assigned.
• Investigate and resolve automation failures, alerts, and service issues; document root cause, remediation, and preventive actions.
• Support security incident response by improving event detection, classification, escalation, and remediation workflows.
• Use on-call findings and service metrics to strengthen fault tolerance, observability, recoverability, and operational resilience.
• Maintain runbooks and operational procedures that enable consistent support and effective handoffs.

Collaboration and Technical Contribution

• Translate security requirements into practical, scalable engineering solutions aligned with business and risk objectives.
• Collaborate with architects, engineers, developers, and operations teams on solution design and implementation.
• Produce clear technical documentation, architecture artifacts, runbooks, metrics, and operational reporting.
• Share knowledge, mentor less-experienced engineers, and recommend improvements to cloud security technologies and engineering practices.

What you have

To ensure that we have fulfilled our promise of "challenging the status quo," this role has specific qualifications that successful candidates should have.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent practical experience.
• 2-5 years of experience in cybersecurity engineering, cloud engineering, software development, or security automation.
• Hands-on experience with at least one major cloud platform: AWS, Azure, or GCP.
• Experience developing automation with Python, PowerShell, Bash, or a comparable language.
• Experience with source control, CI/CD pipelines, DevSecOps practices, and Infrastructure-as-Code technologies such as Terraform, Bicep, CloudFormation, or Pulumi.
• Understanding of fault-tolerant coding, automated testing, logging, monitoring, incident response, vulnerability management, and cloud security principles.
• Ability and willingness to participate in an on-call rotation.
• Strong analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Experience with cloud security platforms such as Cortex Cloud, Prisma Cloud, Wiz, Orca, Lacework, or comparable solutions.
• Knowledge of CSPM, CWP, CIEM, SSPM, CASB, CNAPP, IAM, and cloud security operations.
• Experience implementing Policy-as-Code with Checkov, OPA, Sentinel, or similar technologies.
• Experience building production monitoring, alerting, observability, and automated remediation capabilities.
• Experience supporting production services through incident response and on-call operations.
• Relevant certification such as ISC2 CC, Security+, CCSK, CCSP, AWS Security Specialty, Azure Security Engineer, or GCP Professional Cloud Security Engineer.
• Experience in a highly regulated environment, preferably financial services.

In addition to the salary range, this role is also eligible for bonus or incentive opportunities