Cloud Security Vulnerability Engineer (IC)

Experteer Overview In this role, you will advance Schwab’s vulnerability governance for cloud environments within the Enterprise Vulnerability Management team. You’ll collaborate across security and governance to mature CSPM integration, reducing risk and improving coverage. You will shape secure cloud configurations, drive automated checks, and guide cross-functional efforts to support a scalable security program. This position offers impact across on-premise and cloud environments, aligning with Schwab’s mission to transform financial security practices. You will work on site and help turn cloud vulnerability strategy into practical, measurable improvements. Compensation / Benefits * Lead the creation, management, and enforcement of secure configuration baselines for cloud environments aligned to CIS best practices * Assess configuration compliance for new and updated cloud images with stakeholders across developers, operations, and governance * Evaluate and mature third-party vulnerability scanners against cloud native tools for effective monitoring * Champion scalable security by reducing noise, expanding coverage, and automating checks * Oversee governance activities and cross-functional collaboration to implement cloud vulnerability governance initiatives Tasks * 5+ years of security control monitoring for Cloud environments (AWS and/or GCP) * 3+ years in vulnerability management or patching * 3+ years in process analysis, documentation, and improvement * Strong systems knowledge (Linux, Windows, networking) * Clear, collaborative communication style and problem-solving approach Key requirements *

impact scanners against cloud native tools for effective monitoring * Champion scalable security by reducing noise, expanding coverage, and automating checks * Oversee governance activities and cross-functional collaboration to implement cloud vulnerability governance initiatives Tasks * 5+ years of security control monitoring for Cloud environments (AWS and/or GCP) * 3+ years in vulnerability management or patching * 3+ years in process analysis, documentation, and improvement * Strong systems knowledge (Linux, Windows, networking) * Clear, collaborative communication style and problem-solving approach Key requirements *