Sr. Specialist - Security Analytics & Operations
Your Opportunity
Your opportunity
At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).
The Security Analytics & Operations team helps protect Schwab client data by monitoring database activity and identifying behaviors that may present security risks. As a Sr. Specialist, you will investigate high-risk alerts, document findings, make informed escalation decisions, and help maintain the operational health of the alert queue.
Your work will strengthen the accuracy, reliability, and effectiveness of security monitoring processes, from database coverage and data-feed validation to policy tuning and operational quality assurance. You will collaborate across technical and non-technical teams to resolve emerging database security scenarios, improve processes, and support timely, well-documented risk decisions. Success in this role requires disciplined problem solving, attention to detail, adaptability, and clear communication in a continuously evolving cybersecurity environment.
What you have
Required Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Risk Management, or a related field, or equivalent experience
- 5+ years of cybersecurity, operations center, or technology operations experience within case-based or ticket-based workflows
- Ability to write and run SQL queries to retrieve, validate, and reconcile data
- Ability to review database commands and query activity for unusual, unauthorized, or high-risk behavior and distinguish legitimate administrative activity from potential security concerns
- Ability to consistently follow runbooks, maintain complete case notes and evidence, perform quality checks, and escalate issues promptly to support accurate, auditable, and reliable operations
- Experience using code or scripts to automate repeatable data cleanup, evidence collection, or reporting activities
- Experience supporting security controls in production environments and following defined operating procedures
- Working knowledge of security monitoring, alert triage, and investigation practices
- Ability to maintain accurate documentation and handle investigative evidence with attention to detail
Preferred Qualifications
- Ability to identify potential security risks, evaluate available evidence, and make sound escalation decisions
- Experience working within cloud environments, including Google Cloud Platform (GCP), AWS, and Microsoft Azure
- Experience assessing data-feed completeness, database coverage, policy effectiveness, or operational control quality
- Ability to improve processes while maintaining established service levels and operational standards
- Strong Problem Solving and Decision-Making skills when addressing unfamiliar or evolving security scenarios
- Strong Communication skills with technical and non-technical stakeholders
- Demonstrated Cross-Functional Collaboration and Adaptability across changing priorities and operational demands
In addition to the salary range, this role is eligible for bonus or incentive opportunities.
What’s in it for you
At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.
We offer a competitive benefits package that takes care of the whole you – both today and in the future:
- 401(k) with company match and Employee stock purchase plan
- Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
- Paid parental leave and family building benefits
- Tuition reimbursement
- Health, dental, and vision insurance
What you are good at
What you have
Required Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Risk Management, or a related field, or equivalent experience
- 5+ years of cybersecurity, operations center, or technology operations experience within case-based or ticket-based workflows
- Ability to write and run SQL queries to retrieve, validate, and reconcile data
- Ability to review database commands and query activity for unusual, unauthorized, or high-risk behavior and distinguish legitimate administrative activity from potential security concerns
- Ability to consistently follow runbooks, maintain complete case notes and evidence, perform quality checks, and escalate issues promptly to support accurate, auditable, and reliable operations
- Experience using code or scripts to automate repeatable data cleanup, evidence collection, or reporting activities
- Experience supporting security controls in production environments and following defined operating procedures
- Working knowledge of security monitoring, alert triage, and investigation practices
- Ability to maintain accurate documentation and handle investigative evidence with attention to detail
Preferred Qualifications
- Ability to identify potential security risks, evaluate available evidence, and make sound escalation decisions
- Experience working within cloud environments, including Google Cloud Platform (GCP), AWS, and Microsoft Azure
- Experience assessing data-feed completeness, database coverage, policy effectiveness, or operational control quality
- Ability to improve processes while maintaining established service levels and operational standards
- Strong Problem Solving and Decision-Making skills when addressing unfamiliar or evolving security scenarios
- Strong Communication skills with technical and non-technical stakeholders
- Demonstrated Cross-Functional Collaboration and Adaptability across changing priorities and operational demands
In addition to the salary range, this role is eligible for bonus or incentive opportunities.
Why Schwab?
At Schwab, “Own Your Tomorrow” embodies everything we do! We are committed to helping our employees unleash their potential and achieve their dreams. Our employees get to play a central role in disrupting a multi-trillion-dollar industry, creating a better, more modern way to build and manage wealth. We’re a modern financial services firm that stands apart from the industry, where you can go as far as your ambition takes you.
Hear from employees: What’s it like to work at Schwab!
The benefits of working at Schwab : a package designed to empower your health, wealth, career and life. Schwab is committed to building a diverse and inclusive workplace where everyone feels valued.
As an equal employment opportunity employer, our policy is to provide equal employment opportunities to all employees and applicants without regard to any status that is protected by law. (Please click here to see policy.)
Schwab is also an affirmative action employer, focused on advancing women, minorities, veterans, and individuals with disabilities in the workplace. We believe diversity and inclusion are part of our success as a company and our purpose of serving every client with passion and integrity.