Security Automation & Engineering Lead

The Charles Schwab Corporation; Phoenix (AZ); On-site; USD 130,000 - 180,000; Full time

Job summary

The Charles Schwab Corporation is seeking a Security Software Development Engineer to join Schwab Cybersecurity Services in on-site Phoenix. You will design orchestration and automation solutions, build secure log pipelines for SIEM, and collaborate with SOC analysts to tune detections and automate security operations.

Ideal candidates have 4–6 years in cybersecurity engineering, strong Python and GCP skills, experience with SIEM/SOAR, and a CS degree.

Qualifications

• 4 to 6 years of direct experience in cybersecurity engineering, with experience in SIEM/SOAR development.
• Proficiency in Cloud service implementation preferably Google Cloud Platform (GCP) services
• Strong programming skills in Python for scripting, automation, and API integrations.
• Experience with implementation of resiliency and SecOps feed and health monitoring system
• Ability to analyze security event data, troubleshoot complex issues related to log sources, and fine-tune detection logic.
• Ability to thrive in dynamic and fast-paced team environments
• Exposure and strong interest in cloud AI/ML frameworks
• Excellent communication, collaboration, and critical thinking skills.
• A bachelor’s degree in computer science or related field

Responsibilities

• Design orchestration and automation solutions using Google SecOps platform.
• Develop end-to-end secure log ingestion pipelines for SIEM analyses.
• Collaborate with SOC analysts to develop, assess, and tune high-fidelity detection rules and analytics.
• Develop, implement, and maintain automation playbooks to streamline security operations and incident response.
• Integrate AI/ML capabilities into security workflows using Google's AI services.
• Create comprehensive technical documentation and generate reports on automated controls.
• Influence peers and build cross-team relationships to drive security outcomes.
• Tackle problems of diverse scope requiring analysis of data and context

Skills

SIEM/SOAR

Python

GCP

AI/ML in security

Security event analytics

Cloud security

Team collaboration

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

Google Cloud Platform (GCP)

Job description

The Charles Schwab Corporation is seeking a Security Software Development Engineer to join Schwab Cybersecurity Services in on-site Phoenix. You will design orchestration and automation solutions, build secure log pipelines for SIEM, and collaborate with SOC analysts to tune detections and automate security operations.

Ideal candidates have 4–6 years in cybersecurity engineering, strong Python and GCP skills, experience with SIEM/SOAR, and a CS degree.