Asset & Wealth Management - New York - Associate Security Engineering

Goldman Sachs; New York (NY); On-site; USD 132,000 - 184,000; Full time

Job summary

Goldman Sachs seeks an Associate, Security Engineering in New York, NY to perform security assessments across projects and drive adoption of controls and privacy by design.

Responsibilities include reviewing architectures, conducting risk assessments, performing secure code reviews (Java, React, Python), and coordinating with teams to remediate vulnerabilities and strengthen security posture.

Qualifications

• Master’s or Bachelor’s degree in Cyber Security, Computer Science, Computer Engineering or a related field as required.
• 1 year of security engineering experience with application security, or 3 years with a Bachelor’s degree.
• Experience with both application and infrastructure security on‑premise and in the Cloud.

Responsibilities

• Perform security assessments of business initiatives to drive adoption of security controls and privacy by design.
• Collaborate with global teams to embed security early in major technology initiatives.

Skills

Security assessments

Vulnerability assessments

Secure code reviews

Threat modeling

Attack surface analysis

Security design reviews

Penetration testing

Education

Master’s degree in Cyber Security or related field

Bachelor’s degree in Cyber Security or related field

Tools

OWASP framework

CWE

Cloud security tooling

Job description

Job Duties: Associate, Security Engineering with Goldman Sachs & Co. LLC in New York, New York. Perform security assessments of business-initiated projects to drive adoption of application and infrastructure security controls and best practices, ensuring security and privacy by design.Collaborate with technical and global teams on major technology initiatives to ensure security is embedded early and to enhance detection capabilities through improved tools, tuning, and data sources.Review system architectures, such as client/server, cloud, web, mobile, and security controls to identify gaps and ensure alignment with firm policies, standards, and regulatory requirements.Conduct application security risk assessments across the SDLC, including vulnerability assessments and penetration testing of internal and external applications in coordination with vulnerability management teams.Perform secure code reviews for applications using languages such as Java, React, and Python to identify vulnerabilities and strengthen security posture.Evaluate third-party system integrations and work with infrastructure teams to implement and validate security controls across platforms.Communicate technical findings, risks, and security gaps clearly to stakeholders, developers, and engineers through reporting and presentations to support issue tracking and remediation.

Job Requirements: Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and one (1) year of experience in the job offered or a related Security Engineering role ORBachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and three (3) years of experience in the job offered or a related Security Engineering role. Prior work experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with each of the following: working with both application and infrastructure architecture and security on premise and Cloud; working with application security best practices including OWASP and CWE; working with application security vulnerabilities and controls to remediate risks; assessing and mitigating software security threat vectors, threat modeling, attack surface analysis, security design reviews, source code reviews, penetration testing or vulnerability assessments; working in shift left environment to help embed security in Design phase to implement security controls within system architecture; and conducting infrastructure or application security risk assessments.

Salary Range: Annual base salary for this New York, New York - based position is $132,000 - $184,400.

©The Goldman Sachs Group, Inc., 2026. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.