Associate, Security Engineering

New York Times; New York (NY); On-site; USD 137,000 - 183,000; Full time

Job summary

Goldman Sachs Services LLC in New York, NY, seeks an Associate, Security Engineering to perform security assessments of business-initiated projects and drive adoption of application and infrastructure security controls and best practices.

The role requires a Master’s degree or Bachelor’s degree with several years of experience in security, including threat modeling, vulnerability assessments, and secure software delivery.

Qualifications

• Requires Master’s degree in Cyber Security, Computer Science, Computer Engineering or related field with 1 year of related experience.
• Or a Bachelor’s degree in Cyber Security, Computer Science, Computer Engineering or related field with 3 years of related experience.
• Experience with application and infrastructure security in cloud and on‑premise environments; security design reviews, threat modeling, and risk mitigation.

Responsibilities

• Perform security assessments of business-initiated projects and drive adoption of security controls.
• Assess controls, data models, cryptographic implementations, and regulatory needs.
• Collaborate with stakeholders across engineering, business leadership and regulatory teams to strengthen security strategies.
• Support secure software delivery and embed security in the design phase.

Skills

Security assessments

Threat modeling

OWASP

Vulnerability assessments

Cloud security

Code security reviews

Education

Master’s degree in Cyber Security or related field

Bachelor’s degree in Cyber Security or related field

Job description

Associate, Security Engineering with Goldman Sachs Services LLC in New York, New York. Performing security assessments of business-initiated projects helping to drive adoption of application and infrastructure security controls and best practices. Ensure security and privacy by design, including design process improvements, assessment of controls, data models, cryptographic implementation, and compliance and regulatory needs. Requires: Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and one (1) year of experience in the job offered or a related role OR Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and three (3) years of experience in the job offered or a related role. Prior work experience must include one (1) year with Master’s OR three (3) years with Bachelor’s with the following: application and infrastructure architecture and security (on premise and Cloud); working with application security vulnerabilities and controls to remediate risks including OWASP and CWE; assessing and mitigating software security threat vectors, threat modeling, attack surface analysis, security design reviews, source code reviews, penetration testing or vulnerability assessments; working in shift left environment to help embed security in design phase to implement security controls within system architecture; conducting infrastructure or application security risk assessments; supporting cross-functional tech risk programs by coordinating stakeholders across engineering, business leadership and regulatory teams and applying operations management principles to optimize delivery while ensuring alignment between risk mitigation objective and organizational goals; collaborating in high-level architectural and engineering discussions to assess security risks and strengthen application, infrastructure and cloud security strategies; and developing secure software delivery proposals to improve security controls, reduce vulnerability remediation costs, and mitigate operational risk. Job Code: 10442640

Salary Range: Annual base salary for this New York, New York -based position is $137,000 - $183,000.

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.