SIEM/SOAR Cybersecurity Development Lead

Your Opportunity

At Schwab, you're empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us "challenge the status quo" and transform the finance industry together.

The Schwab Cybersecurity Services (SCS) organization is a centralized Center of Excellence (COE) within Schwab Technology Services (SCS) that provides security services to advance Schwab's security posture of critical assets. The Schwab Cybersecurity Services (SCS) organization is a centralized Center of Excellence (COE) within Schwab Technology Services (STS) that provides security services to advance Schwab's security posture of critical assets.

Automation Engineering team within SCS Application and Data Engineering organization owns the strategy, design, development, implementation and support through automation and orchestration for achieving high security and performance, increasing efficiency, and eliminating manual repetitive tasks in cyber operations and business process within SCS. We are looking for a strong and talented Cloud Security Engineer as technical lead for SIEM/SOAR cloud security development.

What you are good at:

• DevSecOps expertise in building and supporting security solutions for Windows, Linux, including services such as MITRE Navigator, techniques, and sub techniques part of the framework.
• Expertise with SIEM and SOAR platforms
• Building and deploying security solutions using technologies such as Docker, Kubernetes, and GIT Hub.
• Experience with designing and programming applications using advanced Python.
• Proficient with Event Driven and API Driven Programming.
• Experience with Google Cloud Platform including BQ tables and repository.
• Communicating with various audiences, including business leaders, engineers, clients, and team members, with excellent ability to convey information that is relevant to the audience.
• Written communication for excellent documentation and reporting.
• Outstanding teamwork across multidiscipline plan-build-run teams.
• Applying your understanding and expertise with systems automation platforms and technologies.
• Automating security controls, data, and processes to provide metrics and operational support.
• Employing cloud-based APIs when suitable to share the coverage of the security controls and other related data in SIEM with stakeholder teams.
• Developing and delivering solutions using Agile methodology.
• Leveraging the highest level of internal functional expertise in security controls and techniques to address technical issues.
• Evaluating emerging trends or technologies to identify opportunities for innovation in SIEM technologies.
• Mentoring team members in honing their analytical thinking skills and problem-solving capabilities.
• Applying advanced expertise in implementing security controls and technologies.

What you have

Required Qualifications:

• Bachelor's degree in computer science or related field is preferred.
• 15 years of overall Cybersecurity experience
• 7 years of development expertise with SIEM and SOAR platforms
• Building and deploying security solutions using technologies such as Docker, Kubernetes, and GIT Hub.
• Extensive experience with designing and programming applications using advanced Python.
• Proficient with Event Driven and API Driven Programming.
• Experience with Google Cloud Platform including BQ tables and repository.
• Excellent analytical and troubleshooting skills supervising system health to identify and resolve issues that affect the performance, security, or integrity of the solution.
• Strong collaborative relationships to influence technology partners to achieve appropriate controls and risk mitigation techniques related to the area.

In addition to the salary range, this role is also eligible for bonus or incentive opportunities.