Senior Cloud Security Engineer

Your opportunity

At Schwab, you are empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

Schwab’s Cybersecurity team is a first line of defense for Schwab. The Senior Cloud Security Engineer will join the Cloud Security Tools Engineering Team as a central point of contact for Schwab Cybersecurity Services. This role will be a resource for technology related to cloud security controls. They will maintain & support Endpoint Detection & Response of SaaS applications & Cloud infrastructure resources that support business and security strategies, identify and manage threats, and protect intellectual property and client data in cloud applications. 

The primary responsibilities will include but are not limited to administration and engineering support for the Firm’s SaaS Security Posture Management (SSPM) and Cloud Security Posture Management Platforms.

Expectations of a Senior Technology Engineer in this role is the ability to partner and collaborate with other teams effectively across the enterprise with excellent verbal and written communications skills. Think and work independently, analyze, troubleshoot, and resolve complex business and technical problems related to information risk with strong technical writing experience.

What you have

Required:

• 8+ years’ experience of IT system administration is required. Strengths required in these specific areas.
• Cloud security posture management applications
• Infrastructure as Code frameworks such as: Terraform, CloudFormation, and Kubernetes
• Operating system administration of Linux and Windows
• On and Off Premise IaaS engineering and automation experience
• Proficient in REST API development
• TCP/IP networking technologies within large enterprise environments, such as DNS, SMTP, HTTP and Syslog - Proxy, Secure Web Gateway (SWG), and/or web application firewall services
• SSO Federation and authentication technologies (OAuth, OpenID, SAML 2.0, MFA, Active Directory, etc.) - Encryption technologies and their implementations
• Requirements gathering, system analysis, system development, incident handling, change management, and implementation on a large-scale enterprise level
• Experience with creating and optimizing metrics, log analysis, and creating cohesive, audience focused reporting and dashboards from disparate data sources is highly desired

Preferred:

• Cloud Security Tools: Netskope, Palo Alto Networks - Prisma (preferred) or exposure to any other Cloud Access Security Broker/SaaS Security Posture Management (CASB/SSPM) and Cloud Security Posture Management Tools (CSPM)
• Cloud Service Providers (Saas): AWS, Google Cloud Platform, Microsoft Azure (any of these or other is fine)

Continuous Integration/Continuous Deployment & Orchestration:

• Plan, Track & Support:  JIRA, Remedy
• Code, Build & Ship:  BitBucket/GITHub, Bamboo
• Infrastructure as Code:  SaltStack, Ansible, Terraform, CloudFormation, and Kubernetes

Programming Languages:

• Python
• PowerShell
• .NET
• BASH
• JAVA

“In addition to the salary range, this role is also eligible for bonus or incentive opportunities.”