Security Software Development Engineer (SIEM/SOAR)
About The Position
The Application and Data Engineering organization within SCS is responsible for defining the strategy, design, development, implementation, and ongoing support of security automation and orchestration capabilities. Our mission is to strengthen Schwab’s security posture by delivering high‑performance, automated solutions that increase operational efficiency and eliminate repetitive manual tasks across cyber operations and business processes. We are seeking a Security Software Development Engineer (SIEM/SOAR) to join our team. This role will focus on building scalable, intelligent automation and detection capabilities that empower security teams and elevate Schwab’s defensive posture.
Requirements
- 3+ years of direct cybersecurity engineering experience, including hands‑on SIEM or SOAR development.
- Proficiency in cloud service implementation.
- Strong programming skills in Python, Java, C#, or other scripting languages, with experience in security automation and API integrations.
- Ability to analyze security event data, troubleshoot complex log‑source issues, and fine‑tune detection logic.
- Ability to thrive in a dynamic, fast‑paced environment.
- Exposure to and strong interest in cloud‑based AI/ML frameworks.
- Excellent communication, collaboration, and critical‑thinking skills.
- Bachelor’s degree in computer science or a related field.
Nice To Haves
- Certifications such as Google Professional Cloud Security Engineer or relevant cybersecurity certifications.
- Ability to apply AI and ML techniques to strengthen security operations.
Responsibilities
- Design and build orchestration and automation solutions using the Google SecOps platform.
- Develop end‑to‑end secure log ingestion pipelines, ensuring accurate parsing, normalization, and enrichment of security data for SIEM analysis.
- Partner with Security Operations Center (SOC) analysts to create, evaluate, and refine high‑fidelity detection rules, analytics, and correlation logic.
- Build, implement, and maintain SOAR automation playbooks and workflows to streamline security operations and accelerate incident response and triage.
- Integrate AI and machine learning capabilities into security workflows by leveraging Google’s AI services.
- Produce comprehensive technical documentation and generate reports demonstrating the effectiveness of automated controls.
- Positively influence peers and independently foster strong cross‑team relationships.
- Solve diverse technical problems requiring evaluation of multiple factors and data sources.
Benefits
- bonus or incentive opportunities
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
