Senior Manager, Vulnerability Engineering (IC) - Qualys
Your Opportunity
At Schwab, you are empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.
We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).
The Schwab Cybersecurity Services (SCS) organization is a centralized 1st Line of Defense Center of Excellence (COE) that provides security services to advance Schwab’s security posture and enhance the protection of Schwab’s critical assets. Enterprise Vulnerability Management (EVM) performs scanning, risk prioritization, and enforcement across patching and secure configuration, as well as holistic risk aggregation for other control opportunities.
The Opportunity
The Enterprise Vulnerability Management (EVM) team designs, monitors, and enforces the proactive mitigation of vulnerabilities across on-premise and cloud environments. We need a skilled and experienced Senior Manager to help operate and further mature the vulnerability & secure configuration scanning program, identify and advance ideas to improve coverage, improve scanning processes and eliminate inefficiencies.
You’ll be instrumental in advancing our vulnerability management operations, new products, governance, integrations, reporting, telemetry accuracy, asset coverage, audit readiness, and on-call support to deliver secure, reliable services. If you’re passionate about evolving vulnerability management scanning functions, we’d love to chat.
What you’ll do:
- Improve vulnerability management capabilities, platform coverage, and operational maturity
- Manage the CTEM platform, including alerting, integrations, workflows, and reporting
- Oversee vulnerability telemetry ingestion for accurate, timely exposure visibility
- Review and onboard new network subnets quarterly with Infrastructure & Operations
- Maintain asset groups, onboard new IPs, and ensure accurate inventories
- Ensure vulnerability agents, manifests, and updates are deployed across all server environments
- Perform platform maintenance and remediation to preserve stability and data integrity
- Maintain disaster recovery readiness, governance, security controls, and audit support
- Review scans, agent health, authentication failures, and platform performance weekly
- Partner with currency and asset owners on deployments, monitoring, and improvements
- Oversee security governance and alignment with enterprise policies, standards, and risk requirements
- Support critical operations, incident response, and availability through on-call rotation
What you have
Required Qualifications:
- 5+ years of experience with vulnerability management using Qualys
- 3+ years of experience with security control monitoring
- 3+ years of experience with process analysis, automation, documentation, and improvement
- Solid systems knowledge (Linux, Windows, and Networking)
- Some experience using Python/Perl, Unix shells (bash), SQL Server
- Comfortable with Linux command line
- Knowledge of tools like CURL and API interfaces
- A clear and thoughtful communication style and a collaborative approach to problem solving
- Bachelor’s degree in computer science, engineering, or a related field
Preferred Qualifications:
- Hands-on experimentation and value realization with agentic AI or other LLM capabilities
- Experience with Robotics Process Automation (RPA) or other automation tools
- Security certifications, such as CISSP, CISM, GIAC, or Cloud Security certifications are preferred
- Hands-on experience administering one or more technology platforms is a plus
In addition to the salary range, this role is also eligible for bonus or incentive opportunities