Sr Specialist - Security Development & Engineering

The Charles Schwab Corporation; California (MO); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401(k) with company match

Paid time off

Sabbatical every 5 years

Parental leave and family benefits

Tuition reimbursement

Health, dental, and vision insurance

Job summary

The Charles Schwab Corporation is seeking a Threat Detection & Monitoring professional to monitor insider threat tools, triage alerts, and lead investigations. You will analyze data, document findings, and support incident response across HR, Legal, and Risk teams.

Ideal candidates have 2–5+ years in cybersecurity, experience with SIEM/UEBA/DLP/EDR, and strong communication. This role emphasizes collaboration, analytics, and ongoing improvement of detection capabilities.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field (or equivalent experience).
• 2–5+ years of experience in cybersecurity or insider threat.
• Experience with SIEM, UEBA, DLP, or EDR tools.
• Strong analytical and data interpretation skills.
• Knowledge of networking concepts and threat actor techniques.
• Experience with alert triage, incident investigations, and case management.
• Familiarity with behavioral analytics and detection methodologies.
• Experience working cross-functionally with HR, Legal, or Risk teams.
• Strong written and verbal communication skills, including executive-ready reporting.

Responsibilities

• Monitor insider threat tools (UEBA, SIEM, DLP, EDR) to identify anomalous or suspicious user activity.
• Triage and prioritize alerts, correlating data from multiple sources to determine risk and required action.
• Identify trends and behavioral patterns indicative of insider risk activity.
• Conduct thorough investigations into potential insider threats.
• Collect, analyze, and interpret data to develop actionable findings.
• Document investigations with clear evidence and timelines.
• Support the full lifecycle of insider threat incidents.
• Execute response playbooks and contribute to post-incident reviews.
• Escalate high-risk findings in accordance with policy.
• Refine and optimize detection rules and alerts.
• Support development of new detection use cases.
• Partner with engineering teams to enhance analytics.
• Partner with HR, Legal, and Security teams.
• Communicate findings to technical and non-technical stakeholders.
• Serve as liaison for insider threat escalations.
• Prepare reports and summaries on insider threat activity.
• Provide recommendations to improve security posture.
• Maintain accurate case documentation.
• Contribute to playbooks, SOPs, and workflows.
• Identify gaps and recommend improvements.
• Support program maturity initiatives.

Skills

SIEM

UEBA

DLP

EDR

Analytical skills

Networking concepts

Education

Bachelor's degree in Cybersecurity, IT, or related field

Job description

Your Opportunity

Schwab remains committed to providing increased visibility to career growth opportunities and job requirements. This posting announcement is part of increased transparency and while all qualified applicants will be reviewed and considered, this organization has a preferred candidate identified for this role.

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location.

Threat Detection & Monitoring

• Monitor insider threat tools (UEBA, SIEM, DLP, EDR) to identify anomalous or suspicious user activity.
• Triage and prioritize alerts, correlating data from multiple sources to determine risk and required action.
• Identify trends and behavioral patterns indicative of insider risk activity.

Investigation & Analysis

• Conduct thorough investigations into potential insider threats.
• Collect, analyze, and interpret data to develop actionable findings.
• Document investigations with clear evidence and timelines.

Incident Response Support

• Support the full lifecycle of insider threat incidents.
• Execute response playbooks and contribute to post-incident reviews.
• Escalate high-risk findings in accordance with policy.

Detection Engineering & Tuning

• Refine and optimize detection rules and alerts.
• Support development of new detection use cases.
• Partner with engineering teams to enhance analytics.

Cross-Functional Collaboration

• Partner with HR, Legal, and Security teams.
• Communicate findings to technical and non-technical stakeholders.
• Serve as liaison for insider threat escalations.

Reporting & Communication

• Prepare reports and summaries on insider threat activity.
• Provide recommendations to improve security posture.
• Maintain accurate case documentation.

Program & Process Improvement

• Contribute to playbooks, SOPs, and workflows.
• Identify gaps and recommend improvements.
• Support program maturity initiatives.

What you have

To ensure that we have fulfilled our promise of 'challenging the status quo,' this role has specific qualifications that successful candidates should have.

Required Qualifications

Bachelor’s degree in Cybersecurity, IT, or related field (or equivalent experience).

2–5+ years of experience in cybersecurity or insider threat.

Experience with SIEM, UEBA, DLP, or EDR tools.

Strong analytical and data interpretation skills.

Knowledge of networking concepts and threat actor techniques.

Preferred Qualifications

• Experience with alert triage, incident investigations, and case management
• Familiarity with behavioral analytics and detection methodologies
• Experience working cross-functionally with HR, Legal, or Risk teams
• Strong written and verbal communication skills, including executive-ready reporting

In addition to the salary range, this role is also eligible for bonus or incentive opportunities

What’s in it for you

At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.

We offer a competitive benefits package that takes care of the whole you – both today and in the future:

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance