Careers at Charles Schwab

Your opportunity

At Charles Schwab, our purpose is simple: we champion client’s goals with passion and integrity. Guided by honesty, mutual respect and a commitment to doing what’s right, we bring innovation, education, and service together to help shape financial futures. Our people are the foundation of our success – they approach their work with curiosity and collaboration, coming together to create solutions that make a meaningful impact for clients and communities. As we expand into India, we are bringing this same culture of inclusion, learning, and opportunity to new talent. Joining us means becoming part of a global team where your work matters and your future can take shape.​

Our Hyderabad location is central to Schwab’s growth, bringing together talented people and technology to drive innovation, scale and efficiency. Here, you will work alongside teams who create solutions that support millions of clients every day. The work you do is more than daily operations – it’s a chance to experiment, learn, and build within a values-driven, supportive environment. This is a unique opportunity to be part of our early growth phase and shape something new, backed by the stability and strength of a Fortune 500 company. Your impact begins on day one, and your contributions will help define our future in the region.

The Sr Manager, Security Development & Engineering works closely with a broad range of professionals at all levels within Schwab technology, internal and external legal, HR, and business representatives.  The position will conduct investigations for malware campaigns and social engineering.  The Forensics Analyst will receive and respond to escalations from the Security Operations Center and will work with staff both in India and the US.  They will be expected to use Cyber intelligence to proactively seek out threats and protect the firm from harm.

Key Responsibilities :

• Command of response activities by quickly assessing the incident, make decisions about what to do, which team members are needed, and what actions come next at every stage of the resolution process.
• Expert listener, well-versed in gathering, synthesizing, and prioritizing expert recommendations and managing expectations.
• Communications and Liaison with Business Units, HR, Legal and/or external entities.
• Development and maintenance of Incident Response processes, exercises, and training of others Understand all phases of Incident Response and know which tasks occur at each phase: identification, containment remediation, recovery, after action reporting/lessons learned
• Coordination and execution of proactive constant exercises and various levels teaching the Incident Response processes
• Technically understand and participate in malware analysis, including Static, Dynamic, Behavioral analysis.
• Strong understanding of technical forensics to include computer, memory, mobile and network forensics
• Strong understanding of threat hunting and Mitre Att&ck Framework
• Assist in the development of indicators of compromise and cyber intelligence data to supply the Cyber Intelligence function with data for sharing, reporting and metrics
• Training and analysis of impact and capabilities of Incident Response
• Development of business impactful metrics to understand the capabilities of resilience and agility

What you have

Required Qualifications

• Confident decision maker and leadership skills with strong problem-solving skills
• Strong communications and organization capabilities, with attention to detail
• Trustworthy integrity, character, courage, and honesty
• Ongoing networking and building intelligence and industry networks
• Computer, Memory & Network Forensics experience
• Digital Forensics Chain of Custody Experience.
• 7 + years of Incident Management skills and experience
• Foresight and development of playbooks, IR frameworks, Tabletop Exercises
• Advanced and current knowledge of malware families, campaigns, and related threat groups
• Experience with Cloud Forensics and Cloud Incident Response across all cloud platforms - preferred
• Experience with networking environments including Windows networking, Cisco, Juniper
• Experience with Unix, Linux, Mac operating systems
• Knowledge of social engineering campaigns, exploit kits, tactics and techniques used by threat groups.
• Advanced knowledge of network security and DOS/DDoS attacks and mitigation. Including DNS and Layer 7 attacks preferred
• Advanced knowledge of web attacks and response (Web Application Firewalls, Network Firewalls, etc.)

Preferred Qualifications

• Minimum of 10+ years of progressive experience in technology and/or information security
• Minimum of 3+ years of experience in a team leadership role
• Bachelor's Degree (Computer Science or Information Systems) and/or equivalent applicable experience