Application Security Analyst

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

As an entry-level Application Security Engineer, you’ll help build security into our software from design through delivery. You’ll partner with developers and product teams to identify and remediate vulnerabilities, support dynamic application security testing (DAST), and strengthen API security controls. You’ll use foundational programming knowledge in  Java  and  .NET  to understand how issues appear in code and how to fix them efficiently.

You’ll operate within Schwab’s  Secure Application Development Standard and leverage our AppSec services to “shift left” and continuously improve our security posture.

Key Responsibilities

• Perform and support DAST  (., running scans, triaging findings, and retesting after fixes) for web and API-based services; collaborate with engineering to prioritize and remediate issues.
• Apply OWASP Top 10  knowledge to identify common vulnerability categories (., broken access control, injection, SSRF) and advise teams on secure patterns
• Strengthen API security  by participating in inventory, vulnerability triage, and testing activities aligned to our program approach.
• Partner with developers  to reproduce findings, review fixes, and validate remediation—using your understanding of  Java / .NET code paths, frameworks, and typical anti-patterns.
• Support “shift-left” practices  by integrating AppSec tooling into build pipelines and promoting developer experience best practices (., automation, workflow orchestration).
• Document  vulnerabilities, remediation steps, and residual risk; contribute to secure coding guides and internal knowledge bases.
• Monitor and follow up  on open issues; help coordinate cross-team actions during security test cycles and release gating
• Maintain accurate documentation of security findings, remediation status, and communications with stakeholders.
• Contribute to continuous improvement of application security processes and tooling.

What you have

Required Qualifications

Preferred Qualifications

Why work for us?

At Schwab, we’re committed to empowering our employees’ personal and professional success. Our purpose-driven, supportive culture, and focus on your development means you’ll get the tools you need to make a positive difference in the finance industry.

We offer a competitive to our full-time employees that takes care of the whole you – both today and in the future :