Job description

Your opportunity Your Opportunity At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s). As a Senior Application Security Engineer focused on AI security, you will help protect Schwab’s predictive, generative, and agentic AI capabilities throughout the software development lifecycle. You will design scalable security standards, architectures, testing capabilities, monitoring solutions, and guardrails that strengthen AI-enabled applications, models, APIs, and software supply chains. Working across development, architecture, platform engineering, and security teams, you will assess emerging threats, evaluate risk, and translate complex findings into practical security solutions. Your problem-solving, adaptability, and cross-functional collaboration will enable teams to make informed decisions, remediate vulnerabilities, and build secure AI capabilities at scale. This role offers the opportunity to advance Schwab’s AI security practices while expanding your expertise in emerging technologies, automation, and modern application protection. What you have Required qualifications • 5+ years of experience in application security, security engineering, software engineering, or a related cybersecurity discipline • Experience implementing and governing secure Software Development Life Cycle practices • Experience with application security, API security, authentication and authorization, threat modeling, vulnerability management, and software supply chain security • Experience with cloud platforms, continuous integration and continuous delivery pipelines, automation, and modern application architecture • Proficiency in Python, Java, C#, Go, JavaScript, or another programming language Preferred qualifications • Experience securing Generative AI, Large Language Models, Agentic AI platforms, or machine learning systems • Experience performing penetration testing on web, mobile, and thick client applications. • Experience working with LLMs to create agents, create AI harnesses, and solve business problems. • Knowledge of prompt injections, model abuse, model poisoning, data leakage, excessive agency, and related AI threats • Familiarity with the OWASP Top 10 for Large Language Model Applications, NIST AI Risk Management Framework, or MITRE ATLAS • Experience with security testing, observability, and production monitoring • Ability to evaluate complex risks, make sound decisions, and develop scalable solutions • Ability to communicate technical risks and collaborate across development, architecture, platform engineering, and security teams • CISSP, CSSLP, cloud security, AI security, or another relevant industry certification In addition to the salary range, this role is eligible for bonus or incentive opportunities. What’s in it for you At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis. We offer a competitive benefits package that takes care of the whole you – both today and in the future: • 401(k) with company match and Employee stock purchase plan • Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions • Paid parental leave and family building benefits • Tuition reimbursement • Health, dental, and vision insurance

Requirements

Must-haves

Your opportunity
Your Opportunity
What you have
5+ years of experience in application security, security engineering, software engineering, or a related cybersecurity discipline
Experience implementing and governing secure Software Development Life Cycle practices
Experience with application security, API security, authentication and authorization, threat modeling, vulnerability management, and software supply chain security
Experience with cloud platforms, continuous integration and continuous delivery pipelines, automation, and modern application architecture
Proficiency in Python, Java, C#, Go, JavaScript, or another programming language
Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions

Nice-to-haves

Experience securing Generative AI, Large Language Models, Agentic AI platforms, or machine learning systems
Experience performing penetration testing on web, mobile, and thick client applications.
Experience working with LLMs to create agents, create AI harnesses, and solve business problems.
Knowledge of prompt injections, model abuse, model poisoning, data leakage, excessive agency, and related AI threats
Familiarity with the OWASP Top 10 for Large Language Model Applications, NIST AI Risk Management Framework, or MITRE ATLAS
Experience with security testing, observability, and production monitoring
Ability to evaluate complex risks, make sound decisions, and develop scalable solutions
Ability to communicate technical risks and collaborate across development, architecture, platform engineering, and security teams
CISSP, CSSLP, cloud security, AI security, or another relevant industry certification
What’s in it for you
We offer a competitive benefits package that takes care of the whole you – both today and in the future:
Tuition reimbursement

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiapipythonjavagojavascriptmachine learning

Platform: career-feeds
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave