Application Security Engineer - AI Engineer

Join Charles Schwab onsite to secure AI-driven applications across the software development lifecycle.

• Protect Schwab’s predictive, generative, and agentic AI capabilities throughout the software development lifecycle
• Build scalable AI security standards and guardrails including security architecture, testing capabilities, monitoring solutions, and risk controls
• Strengthen the security of AI-enabled applications, models, APIs
  , and software supply chains
• Assess emerging threats, evaluate risk, and turn complex findings into actionable security solutions
• Support teams in making security decisions, remediating vulnerabilities, and scaling secure AI capabilities

• 5+ years of experience in application security, security engineering, software engineering, or a related cybersecurity discipline
• Experience implementing and governing secure SDLC practices
• Experience with application security and API security
  , including authentication and authorization
• Hands-on experience with threat modeling
  , vulnerability management
  , and software supply chain security
• Experience with cloud platforms
  , CI/CD pipelines
  , automation, and modern application architecture
• Proficiency in Python, Java, C#, Go, Java Script , or another programming language

• Experience securing Generative AI
  , Large Language Models
  , Agentic AI platforms
  , or machine learning systems
• Experience performing penetration testing on web, mobile, and thick client applications
• Experience working with LLMs to build agents and AI harnesses for business problem solving
• Knowledge of AI threats including prompt injections
  , model abuse
  , model poisoning
  , data leakage
  , and excessive agency
• Familiarity with OWASP Top 10 for Large Language Model Applications
  , NIST AI Risk Management Framework
  , or MITRE ATLAS
• Experience with security testing,
  observability
  , and production monitoring
• Ability to evaluate complex risks, make sound decisions, and develop scalable solutions
• Strong ability to communicate technical risks and collaborate across development, architecture, platform engineering, and security teams
• CISSP, CSSLP, cloud security, AI security, or another relevant industry certification

• Python
• Java
• C#
• Go
• Java Script

• USD 125, per year
• In addition to the salary range, the role is eligible for bonus or incentive opportunities

• Southlake, TX (onsite)
• Austin, TX (onsite)
• Omaha, NE (onsite)
• Orlando, FL (onsite)

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation and volunteering
• 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance
• Eligible Schwabbies receive Medical, dental and vision benefits
• Eligible Schwabbies receive 401(k) and employee stock purchase plans
• Eligible Schwabbies receive Tuition reimbursement to keep developing your career
• Eligible Schwabbies receive Paid parental leave and adoption/family building benefits
• Eligible Schwabbies receive Sabbatical leave available after five years of employment