Application Security Engineer - Secure SDLC Champion

Charles Schwab; Orlando (FL); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

The Schwab Application Security team safeguards Schwab’s software and data through a secure SDLC, policy creation, and architecture guidance. You will work with developers to balance security with innovation, using tools like Fortify, SCA/SAST, and CodeQL to reduce vulnerabilities and improve secure coding practices across projects.

Success requires collaboration with Agile teams, strong analytical skills, and a track record in application security tooling and threat modeling within enterprise

Qualifications

• 2+ years in static analysis or threat modeling tools.
• Experience with SCA, SAST and secrets management in apps.
• Familiar with OWASP, CIS, NIST security standards.
• Ability to partner with development teams to balance security and innovation.
• Solid understanding of secure coding practices and SDLC integration.

Responsibilities

• Protect Schwab software assets by strengthening development processes and controls.
• Lead integration of security testing into Agile development environments.
• Interpret large volumes of security data into actionable insights.
• Educate developers and testers on secure coding practices.
• Develop security policies, tooling, and architecture guidance.

Skills

Software security

Application security

Threat modeling

Data interpretation

Secure SDLC

Analytical skills

Agile collaboration

Tools

Fortify

CodeQL

SAST tools

SCA tools

Secrets management

GitHub Advanced Security

GitHub Actions

Job description

The Schwab Application Security team safeguards Schwab’s software and data through a secure SDLC, policy creation, and architecture guidance. You will work with developers to balance security with innovation, using tools like Fortify, SCA/SAST, and CodeQL to reduce vulnerabilities and improve secure coding practices across projects.

Success requires collaboration with Agile teams, strong analytical skills, and a track record in application security tooling and threat modeling within enterprise