Your opportunity

At Charles Schwab, our purpose is simple: we champion client’s goals with passion and integrity. Guided by honesty, mutual respect and a commitment to doing what’s right, we bring innovation, education, and service together to help shape financial futures. Our people are the foundation of our success – they approach their work with curiosity and collaboration, coming together to create solutions that make a meaningful impact for clients and communities. As we expand into India, we are bringing this same culture of inclusion, learning, and opportunity to new talent. Joining us means becoming part of a global team where your work matters and your future can take shape.

Our Hyderabad location is central to Schwab’s growth, bringing together talented people and technology to drive innovation, scale and efficiency. Here, you will work alongside teams who create solutions that support millions of clients every day. The work you do is more than daily operations – it’s a chance to experiment, learn, and build within a values-driven, supportive environment. This is a unique opportunity to be part of our early growth phase and shape something new, backed by the stability and strength of a Fortune 500 company. Your impact begins on day one, and your contributions will help define our future in the region.

The Schwab Cybersecurity Services (SCS) organization is a centralized Center of Excellence (COE) within Schwab Technology Services (STS) that delivers security services to strengthen the security posture of Schwab’s critical assets.

The AI Security organization owns the strategy, design, development, implementation, and support of automation and orchestration solutions that strengthen security, improve performance and efficiency, and eliminate manual, repetitive tasks across cyber operations and business processes within SCS.

What you have

Key Responsibilities

• Security automation: Build and deploy SOAR playbooks, integrations, and Python-based automation on Google SecOps and GCP to reduce manual effort.
• Detection and response: Develop and tune SIEM detections, leveraging cloud APIs and AI/agentic AI to improve threat detection, incident response, and SOC efficiency.
• Platform health and collaboration: Monitor SIEM and SOAR platform health, resolve issues, and partner with plan-build-run teams in an Agile model, maintaining clear documentation and reporting.

Required Experience

• 3–4 years of overall cybersecurity experience, including 2–3 years of development experience with SIEM and SOAR platforms (e.g., Google SecOps, Splunk).
• Strong experience designing and developing scalable, secure applications using advanced Python and other modern programming languages.
• Proficiency with cloud platform services, preferably GCP and Google Security Operations.
• Excellent communication skills and strong teamwork across multidisciplinary plan-build-run teams.
• Strong problem-solving skills with a forward-looking mindset—anticipating risks, scaling solutions, and continuously improving security operations through automation.
• Experience with source code repository tools such as GitHub.

Preferred Experience

• Hands-on experience supporting and optimizing security operations, including threat detection, incident response, monitoring, and continuous improvement of SOC processes.
• Applied experience integrating AI into security automation and workflows.
• Experience using cloud-based APIs for security automation.
• Experience developing and delivering solutions using Agile methodology.