VP, Secure SDLC Lead — Global App Security & AI

Goldman Sachs Group, Inc.; Warszawa; On-site; PLN 400,000 - 680,000; Full time

Job summary

Goldman Sachs in Warszawa seeks a Vice President to lead Secure SDLC strategy, governance, and security engineering across the firm. You will drive secure software delivery at scale, collaborating with engineering, product, and technology leaders to embed strong controls.

The role emphasizes AI-augmented analysis, risk reduction, and developer-focused governance to strengthen enterprise security and resilience.

Qualifications

• 7+ years of experience in Application Security, Secure SDLC, DevSecOps or Product Security.
• Strong understanding of Secure SDLC principles and software development practices.
• Hands-on experience with Application Security and security testing methodologies.
• Experience with SAST, DAST and application security tooling.
• Experience integrating security controls into CI/CD pipelines and modern engineering workflows.
• Strong understanding of threat modelling, vulnerability management and application risk assessment.
• Excellent communication and stakeholder management skills.

Responsibilities

• Lead and evolve the firm's Secure Software Development Lifecycle (Secure SDLC) strategy across global engineering teams.
• Drive adoption of application security controls throughout the software development lifecycle, including static and dynamic security testing.
• Partner with engineering teams to embed security-by-design principles into SDLC and CI/CD processes.
• Lead application security reviews, threat modelling activities, and security testing programmes.
• Oversee and enhance security testing capabilities, including SAST, DAST and emerging AI-enabled security testing solutions.
• Assess application security risks and help engineering teams prioritise remediation efforts.
• Collaborate with engineering, product and technology stakeholders to improve security controls and developer security practices.
• Evaluate emerging technologies and AI-driven security capabilities to strengthen Secure SDLC services.
• Mentor and support security engineers while promoting a strong application security culture across the firm.

Skills

Application Security

Secure SDLC

DevSecOps

Product Security

Threat Modelling

CI/CD

Stakeholder Management

Tools

SAST

DAST

CI/CD security tooling

Job description

Goldman Sachs in Warszawa seeks a Vice President to lead Secure SDLC strategy, governance, and security engineering across the firm. You will drive secure software delivery at scale, collaborating with engineering, product, and technology leaders to embed strong controls.

The role emphasizes AI-augmented analysis, risk reduction, and developer-focused governance to strengthen enterprise security and resilience.