Engineering Division - Dallas - Associate, Security Engineering - 10427737

Goldman Sachs Bank AG; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Vacation policy

Financial wellness

On-site health centers

Job summary

Goldman Sachs in Dallas, TX seeks an Associate, Security Engineering to assess security controls for business initiatives and cloud architectures, guiding secure design from the SDLC.

You will partner with engineering teams to implement detections for SIEM/EDR, perform threat hunting, and develop incident response playbooks across on-prem and cloud environments.

Qualifications

• Master’s degree (U.S. or foreign equivalent) in Cyber Security, CS, Electrical/Computer Engineering or related field with 1 year of security engineering experience.
• Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, CS, Electrical/Computer Engineering or related field with 3 years of experience in security engineering.

Responsibilities

• Perform security assessments of business-initiated projects and technologies to drive adoption of secure controls.
• Partner with engineering teams to ensure security by design in SDLC and secure cloud architectures (AWS/Azure).
• Review and harden controls across systems, including cryptographic implementations and data models.
• Collaborate with global teams to enhance detection through logging, SIEM/EDR tuning and telemetry.
• Execute threat hunting missions using threat intelligence and data analysis to identify undetected activity.
• Develop detection strategies and incident response playbooks to protect hybrid environments and mobile apps.
• Convey forensic and threat analyses to senior stakeholders and engineering teams.
• Drive the deployment and optimization of security sensors and logging configurations to ensure SOC visibility.

Skills

Security Engineering

Threat Hunting

SIEM/EDR

Cloud Security

Threat Intelligence

Incident Response

Logging & Telemetry

Education

Master’s degree in Cyber Security

Bachelor’s degree in Cyber Security

Tools

MITRE CVE

CVSS

Job description

Engineering Division - Dallas - Associate, Security Engineering - 10427737 location_on Dallas, TX, United States

Opportunity Overview sitemap_outline CORPORATE TITLE Associate language OFFICE LOCATION(S) Dallas account_balance DIVISION Engineering Division

Job Duties:Associate, Security Engineering with Goldman Sachs Services LLC in Dallas, Texas. Perform security assessments of business-initiated projects and technologies (e.g., python-based web stacks) to drive the adoption of application and infrastructure security controls, ensuring security and privacy by design. Partner with technical teams on major technology initiatives to ensure security and "detection by design" principles are integrated at the outset of the system development lifecycle (SDLC). Advise on engineering solutions to protect the firm’s network and Cloud architectures (e.g., AWS or Azure) from security risks related to web services, mobile applications, and client/server environments. Review security controls across diverse systems to identify gaps and drive the implementation of technical mitigations, including cryptographic implementations and data model assessments. Collaborate with global teams to enhance detection effectiveness by providing technical input on sensory tool uplift, logging telemetry, and the tuning of SIEM/EDR detection logic. Execute hypothesis-driven threat hunting missions across enterprise infrastructure to identify undetected malicious activity using threat intelligence and statistical analysis (e.g., stack counting, outlier detection). Develop detection strategies and incident response playbooks to protect the firm from advanced persistent threats (APTs) targeting hybrid environments and mobile applications. Convey complex forensic and threat analyses via comprehensive presentations and incident post-mortems to senior stakeholders and engineering teams. Drive the implementation and optimization of security sensors and logging configurations across various platforms by collaborating with technology infrastructure teams to ensure full visibility for the SOC.

Job Requirements:Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering or a related field and one (1) year of experience in the job offered or a related Security Engineering roleOR Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering or a related field and three (3) years of experience in the job offered or a related Security Engineering role.Prior work experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with each of the following: designing and auditing technical security controls for enterprise-scale on-premise and Cloud-based architectures, including network segmentation, firewall optimization, and least-privilege enforcement; utilizing industry-standard frameworks, such as MITRE CVE and CVSS to identify, classify, prioritize and drive the remediation of application and infrastructure vulnerabilities through technical controls; performing structured attack surface analysis to identify potential entry points and threat vectors and implementing technical mitigation strategies to harden systems during deployment; conducting comprehensive security risk assessments and maturity gap analyses aligned with industry-standard frameworks such as NIST CSF or CIS Controls; collaborating with cross-functional engineering teams during the design phase to integrate security requirements and "Shift Left" principles into the system development lifecycle (SDLC); and developing custom detections for SIEM/EDR platforms and executing proactive threat hunting missions using threat intelligence (e.g., MISP, industry collaborations) and deep analysis of security telemetry and logs.

We offer a wide range of health and welfare programs that vary depending on office location. These generally include medical, dental, short-term disability, long-term disability, life, accidental death, labor accident and business travel accident insurance.

We offer competitive vacation policies based on employee level and office location. We promote time off from work to recharge by providing generous vacation entitlements and a minimum of three weeks expected vacation usage each year.

Financial Wellness & Retirement

We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees’ priorities.

Health Services

We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices.

Fitness

To encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount).

Child Care & Family Care

We offer on-site child care centers that provide full-time and emergency back-up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.

Benefits at Goldman Sachs

Read more about the full suite of class-leading benefits our firm has to offer.