Assoc, Security Engineering

Goldman Sachs Services LLC; Dallas (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Goldman Sachs Services LLC in Dallas, TX is seeking an Associate Security Engineer to perform security assessments of business-initiated projects and technologies, driving adoption of application and infrastructure security controls. You will partner with technical teams to ensure security is integrated at the outset of the SDLC and support detections for SIEM/EDR.

The role requires a master's or a bachelor's degree with extensive security experience, and hands-on work with CVE/CVSS, NIST

Qualifications

• Designing and auditing technical security controls for enterprise-scale on-premise and Cloud architectures.
• Using MITRE CVE and CVSS to identify, classify, prioritize and remediate vulnerabilities.
• Performing structured attack surface analysis to identify entry points and threat vectors.
• Conducting security risk assessments and maturity gap analyses aligned with NIST CSF or CIS Controls.
• Collaborating with cross-functional engineering teams to Shift Left security in SDLC.
• Developing detections for SIEM/EDR and proactive threat hunting using threat intelligence.

Responsibilities

• Assess security of business-initiated projects and technologies to drive adoption of security controls.
• Partner with technical teams to embed security by design in SDLC.
• Implement and improve detection and response capabilities across SIEM/EDR.

Skills

Security assessments

Security controls design

Threat hunting

MITRE CVE / CVSS

NIST CSF / CIS Controls

Python security

Education

Master's degree in Cyber Security / CS / EE / CE or related field

Bachelor's degree in Cyber Security / CS / EE / CE or related field

Tools

MISP

SIEM/EDR platforms

Job description

Assoc., Security Engineering
Goldman Sachs Services LLC
Dallas, TX

Perform security assessments of business-initiated projects and technologies (e.g., python-based web stacks) to drive the adoption of application and infrastructure security controls, ensuring security and privacy by design. Partner with technical teams on major technology initiatives to ensure security and "detection by design" principles are integrated at the outset of the system development lifecycle (SDLC). Requires: Masters degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering or a related field and one (1) year of experience in the job offered or a related Security Engineering role OR Bachelors degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering or a related field and three (3) years of experience in the job offered or a related Security Engineering role.

Prior work experience must include one (1) year of experience (with a Masters degree) or three (3) years of experience (with a Bachelors degree) with each of the following:

• designing and auditing technical security controls for enterprise-scale on-premise and Cloud-based architectures, including network segmentation, firewall optimization, and least-privilege enforcement
• utilizing industry-standard frameworks, such as MITRE CVE and CVSS to identify, classify, prioritize and drive the remediation of application and infrastructure vulnerabilities through technical controls
• performing structured attack surface analysis to identify potential entry points and threat vectors and implementing technical mitigation strategies to harden systems during deployment
• conducting comprehensive security risk assessments and maturity gap analyses aligned with industry-standard frameworks such as NIST CSF or CIS Controls
• collaborating with cross-functional engineering teams during the design phase to integrate security requirements and "Shift Left" principles into the system development lifecycle (SDLC)
• developing custom detections for SIEM/EDR platforms and executing proactive threat hunting missions using threat intelligence (e.g., MISP, industry collaborations) and deep analysis of security telemetry and logs

Job Code: 10427737

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.