Security Automation Engineer (SIEM/SOAR) - AI-Driven

Charles Schwab; Southlake (TX); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

401(k) with company match

Employee stock purchase plan

Paid time off

Sabbatical after 5 years

Parental leave

Tuition reimbursement

Health, dental, and vision insurance

Job summary

Charles Schwab is seeking a Security Software Development Engineer (SIEM/SOAR) to design and implement scalable automation for cyber operations from Southlake, TX. You will partner with SOC analysts, build secure log pipelines, and integrate AI capabilities to strengthen defense posture.

The role requires 3+ years in cybersecurity engineering with hands-on SIEM/SOAR work, cloud experience, and strong programming skills. A bachelor’s degree in CS or related field is expected.

Qualifications

• 3+ years of direct cybersecurity engineering experience, including hands-on SIEM or SOAR development.
• Proficiency in cloud service implementation.
• Strong programming skills in Python, Java, C#, or other scripting languages, with experience in security automation and API integrations.
• Ability to analyze security event data, troubleshoot complex log-source issues, and fine-tune detection logic.
• Ability to thrive in a dynamic, fast-paced environment.
• Exposure to and strong interest in cloud-based AI/ML frameworks.
• Excellent communication, collaboration, and critical-thinking skills.
• Bachelor’s degree in computer science or a related field.

Responsibilities

• Design and build orchestration and automation solutions using the Google SecOps platform.
• Develop end-to-end secure log ingestion pipelines, ensuring accurate parsing, normalization, and enrichment of security data for SIEM analysis.
• Partner with SOC analysts to create, evaluate, and refine high-fidelity detection rules, analytics, and correlation logic.
• Build, implement, and maintain SOAR automation playbooks and workflows to streamline security operations and accelerate incident response and triage.
• Integrate AI and machine learning capabilities into security workflows by leveraging Google’s AI services.
• Produce comprehensive technical documentation and reports demonstrating the effectiveness of automated controls.
• Positively influence peers and independently foster strong cross-team relationships.
• Solve diverse technical problems requiring evaluation of multiple factors and data sources.

Skills

Cybersecurity engineering

SIEM/SOAR development

Cloud service implementation

Programming: Python/Java/C#

Security data analysis

Communication & collaboration

English proficiency

Education

Bachelor’s degree in computer science or related field

Job description

Charles Schwab is seeking a Security Software Development Engineer (SIEM/SOAR) to design and implement scalable automation for cyber operations from Southlake, TX. You will partner with SOC analysts, build secure log pipelines, and integrate AI capabilities to strengthen defense posture.

The role requires 3+ years in cybersecurity engineering with hands-on SIEM/SOAR work, cloud experience, and strong programming skills. A bachelor’s degree in CS or related field is expected.