Your opportunity

At Charles Schwab, our purpose is simple: we champion client’s goals with passion and integrity. Guided by honesty, mutual respect and a commitment to doing what’s right, we bring innovation, education, and service together to help shape financial futures. Our people are the foundation of our success – they approach their work with curiosity and collaboration, coming together to create solutions that make a meaningful impact for clients and communities. As we expand into India, we are bringing this same culture of inclusion, learning, and opportunity to new talent. Joining us means becoming part of a global team where your work matters and your future can take shape.

Our Hyderabad location is central to Schwab’s growth, bringing together talented people and technology to drive innovation, scale and efficiency. Here, you will work alongside teams who create solutions that support millions of clients every day. The work you do is more than daily operations – it’s a chance to experiment, learn, and build within a values-driven, supportive environment. This is a unique opportunity to be part of our early growth phase and shape something new, backed by the stability and strength of a Fortune 500 company. Your impact begins on day one, and your contributions will help define our future in the region

As a Security Design Review Architect within Schwab Cybersecurity Services, you will be part of the Security Design (SD) team — a group at the center of how Schwab evaluates and approves the security of new and changing technology solutions. You will perform design-stage reviews across SaaS, public cloud, on-premises, and AI/agentic solutions, validating proposed architectures against Schwab's security requirements, standards, and patterns before they are approved to proceed.

This role offers a rare opportunity to influence security outcomes at the architecture level — early, when the cost of change is low and the impact is high. Working alongside domain experts in identity, data protection, network security, cloud, and AI security, you will contribute to a review practice that protects millions of clients and supports Schwab's secure growth in the region.

What you have

Key Responsibilities

• Perform end-to-end security design reviews for SaaS, public cloud (AWS, GCP, Azure), on-premises, and AI/agentic solution proposals, validating each design against Schwab's SDR security requirements, architecture patterns, and applicable standards across all eight review phases — from intake and Definition of Ready through disposition and closeout.
• Conduct architecture and requirements-based reviews covering trust boundaries, authentication and authorization, data protection, network and connectivity, security logging and monitoring, third-party controls, and AI/MCP agent boundaries; identify control gaps, draft clear and testable stipulations, and prepare formal review dispositions.
• Participate in the peer review process to validate stipulation quality, requirement interpretation, and disposition consistency across reviewers; contribute to the continuous improvement of the SDR practice, shared review standards, and the combined SDR security requirements workbook.
• Coordinate with domain SMEs, governance partners and TRACC/CRAMS risk teams to ensure review findings are recorded, governance decisions reflect the security disposition, and open stipulations are handed off for remediation tracking.
• Support Security Design Office Hours, advisory consultations, and standards adherence reviews (including the Client-Facing Authentication Standard), and maintain complete, auditable review records in Jira and Confluence as the systems of record.

Required Experience

• Bachelor's degree in Computer Science, Information Security, Information Systems, or a related technical field; or equivalent practical experience.
• 10+ years of experience in cybersecurity, with at least 5 years focused on security architecture, security design review, or equivalent design-stage security assurance work.
• Demonstrated ability to review and evaluate security architecture , and security patterns for cloud, SaaS, and on-premises solutions.
• Working knowledge of Threat modeling
• Working knowledge of core security control domains: identity and access management (IAM/SSO/MFA), data classification and protection, network segmentation and connectivity (including proxy/Zscaler paths), security logging and monitoring, and third-party/vendor risk controls.
• Hands-on experience with at least one major public cloud platform (AWS, GCP, or Azure), including familiarity with cloud security foundation controls and common cloud service security patterns.
• Experience writing clear, testable, and evidence-based security requirements, stipulations, or findings as part of a formal review or assessment process.
• Ability to communicate security risks and design gaps clearly to both technical architects and non-technical stakeholders.

Preferred Experience

• Active security certification such as CISSP, CCSP, AWS/GCP/Azure Security Specialty, or equivalent.
• Experience performing security design reviews or threat modeling for AI, MCP (Model Context Protocol), or agentic AI solutions, including assessment of agent actions, human-in-the-loop controls, and prompt/data exposure risks.
• Familiarity with NIST 800-53 control families, Cloud Security Alliance (CSA) guidance, or Unified Control Framework (UCF) as applied to design-stage security reviews.
• Experience using Jira and Confluence as systems of record for security reviews, findings, and disposition tracking.
• Prior exposure to financial services, fintech, or a regulated industry environment, with awareness of the intersection between security design and governance/risk frameworks.
• Experience participating in or supporting Architecture Review Boards, Technology Review Boards, or similar governance forums in a security advisory capacity.
• Familiarity with intake-to-disposition review workflows, peer review quality processes, and operational metrics (volume, aging, cycle time) for security review programs.