Cloud Security Vulnerability Engineer (IC)

At Schwab, you are empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

The Schwab Cybersecurity Services (SCS) organization is a centralized 1st Line of Defense Center of Excellence (COE) that provides security services to advance Schwab’s security posture and enhance the protection of Schwab’s critical assets. Enterprise Vulnerability Management (EVM) performs scanning, risk prioritization, and enforcement across patching and secure configuration, as well as holistic risk aggregation for other control opportunities.

The Opportunity:

The Enterprise Vulnerability Management (EVM) team designs, monitors, and enforces the proactive mitigation of vulnerabilities across on-premise and cloud environments. We need a skilled and experienced Senior Manager to help us further mature the integration of vulnerability management controls, especially around Cloud infrastructure configuration and integration with Cloud Secure Posture Management (CSPM).

You’ll be instrumental in converting our vision for Cloud vulnerability governance into life. This will involve cross-functional partnerships across the security organization to identify new risks, champion enhancements, and oversee rigorous governance. If you’re passionate about evolving vulnerability management for Cloud to an embedded developer function, we’d love to chat.

What you’ll do:

• Lead creation, management, and enforcement for secure configuration baselines for Cloud, aligned to CIS best practices
• Evaluate configuration compliance for new and updated Cloud images, subject to vulnerability requirements, with developers, operations teams, and governance review boards
• Continuously evaluate maturity of third-party vulnerability scanner against cloud native tools for fit-for-purpose monitoring
• Advocate for scalable security: reduce noise, improve coverage, and automate checks

• 5+ years of experience with security control monitoring for Cloud environments (preferably AWS and GCP)
• 3+ years of experience with vulnerability management or patching
• 3+ years of experience with process analysis, documentation, and improvement
• Solid systems knowledge (Linux, Windows, and Networking)
• A clear, thoughtful communication style and a collaborative approach to problem solving
• Bachelor’s degree in computer science, engineering, or a related field, * Hands-on experimentation and value realization with agentic AI or other LLM capabilities
• Experience with Robotics Process Automation (RPA) or other automation tools
• Security certifications, such as CISSP, CISM, GIAC, or Cloud Security certifications are preferred
• Hands on experience administering one or more technology platforms is a plus

We offer a competitive benefits package that takes care of the whole you - both today and in the future:

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance

At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration-so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.