Senior Manager, Security Development & Engineering Senior

Hyderabad, Telangana

• *Requisition ID** 2026\-128325 **Category** Engineering \& Software Development **Position type** Regular

• *Your opportunity**
• -------------------

At Charles Schwab, our purpose is simple: we champion client’s goals with passion and integrity. Guided by honesty, mutual respect and commitment to doing what’s right, we bring innovation, education, and service together to help shape financial futures. Our people are the foundation of our success – they approach their work with curiosity and collaboration, coming together to create solutions that make a meaningful impact for clients and communities. As we expand into India, we are bringing this same culture of inclusion, learning, and opportunity to new talent. Joining us means becoming part of a global team where your work matters and your future can take shape.

Our Hyderabad location is central to Schwab’s growth, bringing together talented people and technology to drive innovation, scale and efficiency. Here, you will work alongside teams who create solutions that support millions of clients every day. The work you do is more than daily operations – it’s a chance to experiment, learn, and build within a values\-driven, supportive environment. This is a unique opportunity to be part of our early growth phase and shape something new, backed by the stability and strength of a Fortune 500 company. Your impact begins on day one, and your contributions will help define our future in the region.

• *What you have**
• ----------------

GCP Security Engineering and Operations

• Engineer, implement, and monitor security controls across GCP organizations, folders, projects, networks, workloads, containers, Kubernetes, serverless services, identities, and data services.
• Monitor and triage findings from CSPM, CWP, CNAPP, CIEM, and related cloud security platforms, including misconfigurations, excessive permissions, exposed resources, vulnerable workloads, and policy violations.
• Create, track, and validate remediation through closure; maintain dashboards, inventories, SLA reporting, and security metrics.
• Support onboarding of GCP resources into security platforms and validate connector health, asset visibility, control coverage, finding accuracy, and data quality.
• Identify recurring risks, control gaps, ownership issues, and opportunities for policy tuning or automation.
• Conduct and provide technical expertise for cloud assessments and findings identified by vendors and third party entities.

Policy\-as\-Code, Automation, and DevSecOps

• Translate GCP security requirements into Policy\-as\-Code, Infrastructure\-as\-Code, automated guardrails, and cloud\-native controls.
• Create and maintain automation for finding triage, evidence collection, remediation tracking, reporting, and operational efficiency.
• Integrate IaC scanning, policy validation, workload protection, and deployment guardrails into CI/CD pipelines to shift security left.
• Provide clear remediation guidance when pipeline or GCP security checks fail.
• Use tools such as Terraform, Python, Bash, GitHub, GitLab, Bamboo, Bitbucket, Azure DevOps, or comparable technologies.

Technical Leadership and Architecture Consultation

• Serve as the offshore technical lead and escalation point for complex GCP security findings, workload protection issues, and Policy\-as\-Code questions.
• Mentor junior engineers and analysts; review findings, remediation plans, automation, runbooks, evidence, and operational reporting.
• Translate onshore direction into clear offshore work items, procedures, and measurable deliverables.
• Provide practical input on GCP control design, implementation feasibility, operational supportability, and architecture reviews.
• Convert cloud security standards into repeatable implementation guidance, runbooks, and validation steps.

Reporting, Governance, and Operational Discipline

• Report on finding status, remediation performance, SLA adherence, control coverage, queue health, and recurring risk themes.
• Maintain standard operating procedures, knowledge articles, runbooks, and offshore handoff documentation.
• Support audit, compliance, and regulatory evidence requests with accurate artifacts and validation.
• Communicate risks and blockers clearly, escalate high\-risk issues promptly, and recommend improvements that reduce manual effort and strengthen control effectiveness.

• *Key Responsibilities**
• GCP Security Engineering and Operations
• Policy\-as\-Code, Automation, and DevSecOps
• Technical Leadership and Architecture Consultation
• Reporting, Governance, and Operational Discipline

• *Required Experience**
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent practical experience.
• 5 or more years of experience in cloud security, cybersecurity operations, cloud engineering, infrastructure engineering, or DevSecOps.
• Expert knowledge of GCP security architecture, services, controls, identity and access management, networking, logging, monitoring, workload protection, and remediation practices.
• Hands\-on experience securing GCP organizations, folders, projects, workloads, containers, Kubernetes, serverless services, identities, and data services.
• Working knowledge of CSPM, CWP, CNAPP, CIEM, Policy\-as\-Code, Infrastructure\-as\-Code, and cloud security automation.
• Experience with cloud security platforms such as Cortex Cloud, Prisma Cloud, Wiz, Orca Security, Zscaler, or comparable tools.
• Experience integrating security into CI/CD and DevSecOps workflows and using Terraform, Python, Bash, or comparable technologies.
• Experience with ServiceNow, Jira, Azure DevOps, or similar workflow platforms.
• Ability to mentor junior team members, troubleshoot complex issues, and communicate actionable guidance to technical and non\-technical stakeholders.

• *Preferred Experience**
• Hands\-on cloud security experience with AWS and/or Azure.
• Experience supporting multi\-cloud or SaaS security programs, including DLP or automated remediation.
• Experience in a highly regulated environment, ideally financial services.
• Experience building dashboards, metrics, remediation trackers, evidence packages, and executive\-ready reporting.
• Experience creating runbooks, standard operating procedures, and offshore handoff documentation.
• GCP Professional Cloud Security Engineer certification; Security\+, CCSK, CCSP, CISSP, AWS Security Specialty, AZ\-500, or equivalent certifications are also valued.

• *What’s in it for you**
• -----------------------

At Schwab India, you’re empowered to shape your future. We support your growth through meaningful work, continuous learning, and a culture rooted in trust and collaboration – so you can build the skills to make a lasting impact. Our benefits are designed to care for your wellbeing, your family, and your long\-term financial security.

• *Our base benefits, wellbeing, and total rewards include:**
• -----------------------------------------------------------

• Competitive compensation and retirement programs including Employee Provident Fund (EPF), Gratuity, and optional National Pension System (NPS) contributions
• Robust Paid Time Off, including annual/privilege leave, sick and casual leave, public holidays, maternity/paternity leave, and more
• Comprehensive medical insurance with Outpatient Department (OPD) services, including vaccination, pharmacy, dental, and vision coverage
• Annual reimbursement for health check\-ups and mental health support through our Employee Assistance Program (EAP)
• Childcare (creche) reimbursement for eligible employees
• Transportation and meal benefits that support your day\-to\-day work
• Group life, personal accident, and critical illness insurance