Security Development and Automation Engineer

Your Opportunity

The Schwab Cybersecurity Services (SCS) organization is a centralized Center of Excellence (COE) within Schwab Technology Services (SCS) that provides security services to advance Schwab’s security posture of critical assets. The Schwab Cybersecurity Services (SCS) organization is a centralized Center of Excellence (COE) within Schwab Technology Services (STS) that provides security services to advance Schwab’s security posture of critical assets.

Automation Engineering team within SCS Application and Data Engineering organization owns the strategy, design, development, implementation and support through automation and orchestration for achieving high security and performance, increasing efficiency, and eliminating manual repetitive tasks in cyber operations and business process within SCS

• Dev Sec Ops  expertise in building and supporting security operations
• Expertise with SIEM and SOAR platforms
• Experience with designing and programming applications using advanced Python
• Applied experience integrating AI/agentic AI into security automation and workflows (e.g., alert triage, enrichment, investigation support)
• Experience with Google Cloud Platform including BQ tables and repository
• Experience with source code repository tools such as Bit Bucket and Git Hub
• Automating security controls, data, and processes to provide metrics and operational support
• Employing cloud-based APIs for security automation
• Developing and delivering solutions using Agile methodology
• Applying advanced expertise in implementing security controls and technologies
• Communicating with various audiences, including business leaders, engineers, clients, and team members
• Strong problem‑solving skills with a forward‑looking mindset—anticipating risk, scaling solutions, and continuously improving security operations through automation
• Written communication for excellent documentation and reporting
• Outstanding teamwork across multidiscipline plan‑build‑run teams

Required Qualifications:

• Bachelor’s degree in computer science or related field is preferred
• 8 to 10 years of overall Cybersecurity experience
• 5–6 years of development expertise with SIEM and SOAR platforms
• Extensive experience designing and developing scalable, secure applications using advanced Python and modern programming languages
• Hands‑on experience supporting and optimizing security operations, including threat detection, incident response, monitoring, and continuous improvement of SOC processes
• Experience applying AI in cybersecurity (e.g., threat hunting, alert consolidation, false‑positive reduction, case generation, or workflow automation)
• Excellent analytical and troubleshooting skills supervising system health to identify and resolve issues that affect the performance, security, or integrity of the solution
• Expertise in threat detection, incident response, threat intelligence, and common attack frameworks like MITRE ATT&CK
• Proficiency in Cloud Platform services, preferably with GCP and Google Security Operations
• Excellent communication, collaboration, and problem‑solving skills
• Relevant certifications such as Google Professional Cloud Security Engineer or Certified Information Systems Security Professional (CISSP) are preferred

In addition to the salary range, this role is also eligible for bonus or incentive opportunities