Sr. Specialist - Security Development & Engineering

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

As a Vulnerability Management and Security Controls Analyst, you will play a critical role in strengthening Schwab’s layered security strategy by helping identify, assess, prioritize, and remediate security risks across the enterprise. In this role, you will continuously evaluate and improve security monitoring capabilities, leveraging automation, analytics, and scalable processes to enhance visibility and reduce risk. You will collaborate closely with cybersecurity experts, technology teams, and business stakeholders to drive informed decision-making, improve security posture, and support effective risk management practices.

Success in this role requires a strong ability to analyze complex security challenges, identify opportunities for process optimization, and advocate for solutions that improve efficiency, coverage, and resiliency. You will evaluate security events and control effectiveness, provide actionable recommendations based on threat intelligence and risk insights, and help expand automation strategies that accelerate vulnerability management outcomes. Working across multiple security domains, you will influence security practices, support governance and compliance objectives, and contribute to enterprise-wide efforts that protect Schwab, its clients, and its business operations.

Required Qualifications

• 3+ years of cybersecurity experience supporting layered security controls, including areas such as patch management, configuration management, Endpoint Detection and Response (EDR), Identity and Access Management (IAM), and network access controls
• 3+ years of experience monitoring, prioritizing, and enforcing security controls in support of risk reduction and security operations objectives
• 3+ years of experience analyzing, documenting, and improving business or security processes
• 2+ years of experience supporting governance, risk, compliance, or security process oversight initiatives
• 1+ years of experience leveraging Robotics Process Automation (RPA) or other automation technologies to improve operational efficiency
• Demonstrated ability to assess security events, analyze risk exposure, and provide practical remediation recommendations
• Strong problem-solving, analytical thinking, and decision-making skills with the ability to prioritize competing risks and initiatives
• Ability to build effective partnerships and collaborate across technical and non-technical teams

Preferred Qualifications

• Experience serving as a subject matter expert in vulnerability management for infrastructure platforms including servers, networks, databases, workstations, or mainframe environments
• Experience working with vulnerability management, security monitoring, threat intelligence, or security operations technologies
• Knowledge of security frameworks, controls, and industry best practices
• Experience driving process automation initiatives that improve scalability, reduce manual effort, and increase operational effectiveness
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Industry certifications such as Security+, CISSP, GSEC, GIAC, CISM, or equivalent cybersecurity certifications

In addition to the salary range, this role is eligible for bonus or incentive opportunities.

What’s in it for you

At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.

We offer a competitive benefits package that takes care of the whole you – both today and in the future:

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance

Required Qualifications

• 3+ years of cybersecurity experience supporting layered security controls, including areas such as patch management, configuration management, Endpoint Detection and Response (EDR), Identity and Access Management (IAM), and network access controls
• 3+ years of experience monitoring, prioritizing, and enforcing security controls in support of risk reduction and security operations objectives
• 3+ years of experience analyzing, documenting, and improving business or security processes
• 2+ years of experience supporting governance, risk, compliance, or security process oversight initiatives
• 1+ years of experience leveraging Robotics Process Automation (RPA) or other automation technologies to improve operational efficiency
• Demonstrated ability to assess security events, analyze risk exposure, and provide practical remediation recommendations
• Strong problem-solving, analytical thinking, and decision-making skills with the ability to prioritize competing risks and initiatives
• Ability to build effective partnerships and collaborate across technical and non-technical teams

Preferred Qualifications

• Experience serving as a subject matter expert in vulnerability management for infrastructure platforms including servers, networks, databases, workstations, or mainframe environments
• Experience working with vulnerability management, security monitoring, threat intelligence, or security operations technologies
• Knowledge of security frameworks, controls, and industry best practices
• Experience driving process automation initiatives that improve scalability, reduce manual effort, and increase operational effectiveness
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Industry certifications such as Security+, CISSP, GSEC, GIAC, CISM, or equivalent cybersecurity certifications

In addition to the salary range, this role is eligible for bonus or incentive opportunities.

Why Schwab?

At Schwab, “Own Your Tomorrow” embodies everything we do! We are committed to helping our employees unleash their potential and achieve their dreams. Our employees get to play a central role in disrupting a multi-trillion-dollar industry, creating a better, more modern way to build and manage wealth. We’re a modern financial services firm that stands apart from the industry, where you can go as far as your ambition takes you.

Hear from employees: What’s it like to work at Schwab!

The benefits of working at Schwab : a package designed to empower your health, wealth, career and life. Schwab is committed to building a diverse and inclusive workplace where everyone feels valued.

As an equal employment opportunity employer, our policy is to provide equal employment opportunities to all employees and applicants without regard to any status that is protected by law. (Please click here to see policy.)

Schwab is also an affirmative action employer, focused on advancing women, minorities, veterans, and individuals with disabilities in the workplace. We believe diversity and inclusion are part of our success as a company and our purpose of serving every client with passion and integrity.