On-Site Senior Security Analytics & Operations Lead

Charles Schwab Inc.; Southlake (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Charles Schwab Inc. is seeking a Sr. Specialist for Security Analytics & Operations. You will investigate high-risk alerts, document findings, and escalate as needed while maintaining the alert queue's health. Your work strengthens monitoring accuracy and reliability.

Collaborating with both technical and non-technical teams, you will resolve evolving database security scenarios, improve processes, and support timely risk decisions in a dynamic cybersecurity environment.

Qualifications

• Bachelor’s degree or equivalent experience.
• 5+ years in cybersecurity, SOC, or tech operations.
• Ability to write and run SQL queries to retrieve, validate, and reconcile data.
• Ability to review database commands and query activity for unusual, unauthorized, or high-risk behavior.
• Follow runbooks, maintain case notes, and escalate issues promptly.
• Automation experience with scripting for data cleanup or reporting.

Responsibilities

• Investigate high-risk alerts and document findings.
• Make informed escalation decisions and maintain the alert queue health.
• Strengthen accuracy and reliability of security monitoring processes.
• Collaborate across technical and non-technical teams to resolve scenarios.
• Support timely, well-documented risk decisions in a dynamic security environment.

Skills

SQL

Risk assessment

Security monitoring

Documentation

Automation

Runbooks

Security controls

Data analysis

Escalation decisions

Investigation

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Risk Management, or related field

Tools

SQL databases

Job description

Charles Schwab Inc. is seeking a Sr. Specialist for Security Analytics & Operations. You will investigate high-risk alerts, document findings, and escalate as needed while maintaining the alert queue's health. Your work strengthens monitoring accuracy and reliability.

Collaborating with both technical and non-technical teams, you will resolve evolving database security scenarios, improve processes, and support timely risk decisions in a dynamic cybersecurity environment.