Security Engineering

Goldman Sachs Bank AG; India; On-site; INR 3,000,000 - 5,000,000; Full time

Benefits offered by this job

Healthcare & Medical Insurance

Vacation policies

Financial Wellness & Retirement

Health Services

Fitness

Child Care & Family Care

Benefits at Goldman Sachs

Job summary

Goldman Sachs is seeking a Security Engineer for its Threat Management Center in India. The role focuses on detection engineering, incident response, and live triage using world‑class security tooling. Expect hands‑on work across Windows, Linux, and network security with opportunities to automate response workflows.

The candidate will design and tune detection rules, develop adversary‑informed use cases, and participate in 24x7 security operations to defend a global network.

Qualifications

• Experience in threat detection engineering and incident response.
• Hands-on security engineering with Windows, Linux, and network security.
• Proficiency in MITRE ATT&CK and NIST frameworks; SIEM tuning.
• Strong scripting skills in Python and PowerShell.

Responsibilities

• Coordinate and triage cybersecurity events and conduct forensic analysis.
• Develop use cases based on adversarial tactics and tune detection rules.
• Lead security projects with planning, implementation, and coordination.
• Participate in a 24x7 coverage model to protect global networks.

Skills

Threat detection

Python scripting

PowerShell

MITRE ATT&CK

NIST framework

SIEM: Splunk

Incident response

Communication

Education

GNFA/GCFE/GCFA/CCFP/CFCE/ACE/OSCP/GCFR

Tools

BQL

Job description

HOW YOU WILL FULFILL YOUR POTENTIAL

As a Security Engineer in GCDI’s Threat Management Center, you will be an integral part of a technical team that is responsible for providing the GCDI organization with security sensors and data sets that increase awareness of current and potential Cyber Threats. The ideal candidate should be someone with cyber security experience, hands‑on technical skills on Windows, Linux and Network security, along with experience in utilizing security information for detection engineering, live intrusions and triage security events in real‑time. You will conduct cyber event and incident response investigations and remediate security gaps using world‑class security tooling. You will also have opportunities to automate incident response workflows and remediation activities in order to increase the efficacy of our incident response efforts.

Job Responsibilities:

• Enable a world‑class cyber defense program by working closely with other technical, incident management, and forensic personnel to develop a fuller understanding of the intent, objectives, and activity of cyber threat actors
• Work at the forefront of designing an innovative threat and security incident management solution
• Coordinate and triage response to cybersecurity events and conduct forensic analysis
• Analyze potential infrastructure security incidents to determine if incident qualifies as a legitimate security breach
• Perform host‑based and network forensic investigations, determining the cause of the security incident and preserving evidence for potential legal action
• Participate in a 24x7 coverage model to prevent and remediate security threats against Goldman Sachs’ global business network
• Contribute to improve the efficiency of the Security sensors by looking for opportunity to tune the security controls to adjust to the ever‑evolving security threat land scape
• Effectively lead the security projects/tasks assigned by taking ownership of planning, implementation & coordination
• Experience in developing use cases based on adversarial tactics, techniques and procedures (TTPs), and tuning event detection rules to optimize detection efficacy

Basic Qualifications:

• Strong verbal and written communication skills, capable of clearly conveying complex technical concepts to both technical and non-technical stakeholders.
• Robust analytical and problem‑solving abilities, demonstrated by proactively identifying and resolving security challenges, as well as coordinating incident response efforts within a dynamic environment.
• Comprehensive understanding of security frameworks such as MITRE ATT&CK and NIST, along with expertise in threat intelligence, automation strategies, and developing detection logic within SIEM platforms like Splunk, Elastic, and BQL.
• Strong sense of ownership and commitment to managing tasks to completion, including overseeing daily operations and ensuring effective detection and mitigation of threats.
• Proficiency in scripting languages, including advanced skills in Python and PowerShell for developing detection queries and automating security processes.
• Relevant industry certifications, such as GNFA, GCFE, GCFA, CCFP, CFCE, ACE, OSCP, or GCFR.

Preferred qualifications:

• Over 7+ years of experience in cybersecurity, including a minimum of 3 years specializing in detection engineering technologies and incident response.
• Managed Security Operations Center (SOC) activities as a shift lead, overseeing daily operations, coordinating incident response efforts, and ensuring effective detection and mitigation of threats within a dynamic environment.
• Proficiency in scripting languages, including Python and PowerShell
• Expertise in developing advanced analytical queries within SIEM platforms such as Splunk, Elastic, and BQL
• Experience crafting queries and detection logic in EDR solutions like Microsoft Defender for Endpoint (MDE) and CrowdStrike Falcon
• Knowledge conducting incident response within a major public cloud (i.e. AWS, Google, Azure)
• At least one of the following certifications: GNFA, GCFE, GCFA, CCFP, CFCE, ACE, OSCP, GCFR

Healthcare & Medical Insurance

• We offer a wide range of health and welfare programs that vary depending on office location. These generally include medical, dental, short‑term disability, long‑term disability, life, accidental death, labor accident and business travel accident insurance.

• We offer competitive vacation policies based on employee level and office location. We promote time off from work to recharge by providing generous vacation entitlements and a minimum of three weeks expected vacation usage each year.

Financial Wellness & Retirement

• We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees’ priorities.

Health Services

• We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state‑of‑the‑art on‑site health centers in certain offices.

Fitness

• To encourage employees to live a healthy and active lifestyle, some of our offices feature on‑site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre‑approved amount).

Child Care & Family Care

• We offer on‑site child care centers that provide full‑time and emergency back‑up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.

Benefits at Goldman Sachs

Read more about the full suite of class‑leading benefits our firm has to offer.