Job Description

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

Security Engineer (Secure Software + Automation + AI)

We’re looking for a hands-on security engineer who ships code—building automation and integrations that make secure development faster, safer, and easier at scale. You’ll work on practical security engineering problems across the SDLC, including AI-enabled security use cases and responsible AI guardrails

What you’ll do

• Build and maintain security automation (services, scripts, integrations) that reduces manual work and improves reliability.
• Integrate security into developer workflows (code scanning, CI/CD checks, issue routing, PR-based remediation, reporting).
• Partner with engineering teams to build security in from the start (practical patterns, tooling, and enablement
• Contribute to AI security and governance controls (prompt/input safeguards, guardrails, monitoring, safe integration patterns).
• Help accelerate security outcomes with AI-enabled security use cases (e.g., AI-assisted remediation and security workflow improvements).

What you have

What we’re looking for (must-have)

• Strong software engineering skills and comfort shipping production code (e.g., NET, Python, Java, etc.).
• Solid integration experience: REST APIs, JSON, authentication flows, troubleshooting logs, and operational debugging.
• Experience automating workflows (CI/CD, scripting, build/release pipelines, developer tooling).
• A builder mindset: you like turning messy security problems into repeatable, scalable engineering solutions.

Nice-to-have (not required)

• Exposure to application security tools/processes (SAST/DAST, secure SDLC, threat modeling).
• Any familiarity with trust/identity/certificates/PKI (helpful, but not the focus).