This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together. We are expanding our Insider Threat Operations Team. This role supports and analyzes threat detection for the Cybersecurity Defense Insider Threat program. This resource will work with a team of analysts in the identification and development of new processes and techniques to analyze information with the goal of detecting risks and gaps in the areas of people, processes, and technology. This resource will also utilize understanding of Insider Threat principles to identify trends and patterns which can assist in the development of new detection rules and models. The role offers a hybrid/flexible schedule, which means there’s an in-office expectation of 4 or more days per week and the flexibility to work outside the office location for the other day.
Job Responsibility:
Support and analyze threat detection for the Cybersecurity Defense Insider Threat program
Work with a team of analysts in the identification and development of new processes and techniques to analyze information with the goal of detecting risks and gaps in the areas of people, processes, and technology
Utilize understanding of Insider Threat principles to identify trends and patterns which can assist in the development of new detection rules and models
Requirements:
Understanding of computer networking concepts, communication protocols, primary threat actor attack methods and tools
Competent in collecting, analyzing, and interpreting qualitative and quantitative data from multiple sources, documenting results, and analyzing findings to provide viable threat intelligence
Ability to understand and learn technical specifications, system requirements and other application design information as needed
Detail-oriented person who is passionate about quality and is enthusiastic about innovative technology offerings
Strong verbal and written communication skills and you are comfortable composing briefs and assessments for leadership
Familiar with analytical programming languages such as SQL
Ability to thrive in ambiguity and rapid change
Comfortable with process flow diagrams
Familiar with applying Agile Methods
Basic understanding of a variety of security and compliance policies and incident response processes
Experience monitoring and analyzing Data Loss Prevention (DLP) and Database Activity Monitoring (DAM) incidents to ensure compliance with company policies
Ability to exercise sound judgment when determining which events require follow-up response or escalation
Comfortable working with internal customers to respond to escalations