Cloud Security Vulnerability Engineer (IC)

Experteer Overview In this role you will advance Schwab’s vulnerability management for cloud by maturing governance and CSPM integration. You will partner across security to identify risks, drive enhancements, and govern secure configuration baselines for cloud. You will assess cloud image configurations, align with CIS best practices, and reduce noise while improving coverage through automation. You will help embed vulnerability management as an engineering-facing function, delivering measurable risk reduction in AWS and GCP environments. Compensation / Benefits * Lead creation, management, and enforcement of secure configuration baselines for cloud aligned to CIS * Evaluate configuration compliance for cloud images with developers, operations, and governance boards * Assess maturity of third-party vulnerability scanners versus cloud-native tools for monitoring * Advocate for scalable security: reduce noise, increase coverage, and automate checks * Foster cross-functional partnerships to identify risks, champion enhancements, and govern vulnerabilities Tasks * 5+ years in security control monitoring for cloud environments (AWS and/or GCP preferred) * 3+ years in vulnerability management or patching * 3+ years in process analysis, documentation, and improvement * Solid systems knowledge (Linux, Windows, networking) * Clear, collaborative communication style Key requirements *

to identify risks, champion enhancements, and govern vulnerabilities Tasks * 5+ years in security control monitoring for cloud environments (AWS and/or GCP preferred) * 3+ years in vulnerability management or patching * 3+ years in process analysis, documentation, and improvement * Solid systems knowledge (Linux, Windows, networking) * Clear, collaborative communication style Key requirements *