Associate Security Engineer — Cloud & App Risk

Goldman Sachs Bank AG; Richardson (TX); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Vacation policy

Retirement benefits

On-site health centers

Job summary

Goldman Sachs Bank USA in Richardson, Texas seeks an Associate, Security Engineering to perform security assessments of business projects and drive adoption of security controls across cloud, on-prem, and hybrid environments.

The role involves risk reviews of third-party integrations, advising on secure design, and collaborating with a global team to enhance detection capabilities and regulatory compliance through tools like Splunk and Excel.

Qualifications

• Master's or Bachelor's degree in Cyber Security, Computer Science, Computer Engineering or related field with related experience.
• Experience includes gathering evidence for compliance & control gap assessments (SOC1, CCPA, etc.), risk analysis per regulatory frameworks (NIST), and security audits.
• Experience analyzing security vulnerabilities in tools/components across hybrid/cloud/on-prem environments using reporting/analytic tools (Splunk, Excel).

Responsibilities

• Perform security assessments of business-initiated projects and drive adoption of security controls.
• Advise on secure design to protect the firm’s network across client/server, cloud, web services and mobile apps.
• Conduct risk reviews of third-party system integrations against firm policies and standards.
• Collaborate with global team to uplift sensors, tuning, and data sources for enhanced detection.
• Review security controls to identify gaps and articulate risk to developers or engineers.

Skills

SOC1/Compliance

Risk assessment

Security audits

Vulnerability analysis

Security design

Education

Master's degree in Cyber Security / CS / CE

Bachelor's degree in Cyber Security / CS / CE

Tools

Splunk

Excel

Azure

AWS

Active Directory

Windows Server

Job description

Goldman Sachs Bank USA in Richardson, Texas seeks an Associate, Security Engineering to perform security assessments of business projects and drive adoption of security controls across cloud, on-prem, and hybrid environments.

The role involves risk reviews of third-party integrations, advising on secure design, and collaborating with a global team to enhance detection capabilities and regulatory compliance through tools like Splunk and Excel.