Engineering Division - Dallas - Associate, Security Engineering - 10427737

Goldman Sachs; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Goldman Sachs seeks an Associate, Security Engineering in Dallas, TX to perform security assessments of business initiatives and technologies, driving the adoption of robust controls from the SDLC. You will collaborate with technical teams to embed security by design in cloud and on-prem environments, and help harden web services, mobile apps, and client/server stacks.

The role emphasizes threat hunting, detection strategy development, and incident response playbooks, with complex analyses

Qualifications

• Master’s degree in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering or a related field and one year of experience in Security Engineering or a related role.
• Bachelor’s degree in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering or a related field and three years of experience in Security Engineering or a related role.

Responsibilities

• Perform security assessments of business-initiated projects and technologies to drive security controls.
• Advise on engineering solutions to protect networks and cloud architectures from security risks.
• Collaborate with global teams to enhance detection through SIEM/EDR tuning and telemetry.
• Develop detections and threat-hunting missions across enterprise infrastructure.
• Convey forensic and threat analyses to senior stakeholders and engineering teams.

Skills

Threat hunting

SIEM/EDR

Cloud security

Vulnerability management

Education

Master’s degree in Cyber Security, Computer Science or related field

Bachelor’s degree in Cyber Security, Computer Science or related field

Tools

SIEM/EDR

Cloud security tools

Job description

Job Description

Job Duties: Associate, Security Engineering with Goldman Sachs Services LLC in Dallas, Texas. Perform security assessments of business-initiated projects and technologies (e.g., python-based web stacks) to drive the adoption of application and infrastructure security controls, ensuring security and privacy by design. Partner with technical teams on major technology initiatives to ensure security and \"detection by design\" principles are integrated at the outset of the system development lifecycle (SDLC). Advise on engineering solutions to protect the firm’s network and Cloud architectures (e.g., AWS or Azure) from security risks related to web services, mobile applications, and client/server environments. Review security controls across diverse systems to identify gaps and drive the implementation of technical mitigations, including cryptographic implementations and data model assessments. Collaborate with global teams to enhance detection effectiveness by providing technical input on sensory tool uplift, logging telemetry, and the tuning of SIEM/EDR detection logic. Execute hypothesis-driven threat hunting missions across enterprise infrastructure to identify undetected malicious activity using threat intelligence and statistical analysis (e.g., stack counting, outlier detection). Develop detection strategies and incident response playbooks to protect the firm from advanced persistent threats (APTs) targeting hybrid environments and mobile applications. Convey complex forensic and threat analyses via comprehensive presentations and incident post-mortems to senior stakeholders and engineering teams. Drive the implementation and optimization of security sensors and logging configurations across various platforms by collaborating with technology infrastructure teams to ensure full visibility for the SOC.

Job Description

Job Duties: Associate, Security Engineering with Goldman Sachs Services LLC in Dallas, Texas. Perform security assessments of business-initiated projects and technologies (e.g., python-based web stacks) to drive the adoption of application and infrastructure security controls, ensuring security and privacy by design. Partner with technical teams on major technology initiatives to ensure security and \"detection by design\" principles are integrated at the outset of the system development lifecycle (SDLC). Advise on engineering solutions to protect the firm’s network and Cloud architectures (e.g., AWS or Azure) from security risks related to web services, mobile applications, and client/server environments. Review security controls across diverse systems to identify gaps and drive the implementation of technical mitigations, including cryptographic implementations and data model assessments. Collaborate with global teams to enhance detection effectiveness by providing technical input on sensory tool uplift, logging telemetry, and the tuning of SIEM/EDR detection logic. Execute hypothesis-driven threat hunting missions across enterprise infrastructure to identify undetected malicious activity using threat intelligence and statistical analysis (e.g., stack counting, outlier detection). Develop detection strategies and incident response playbooks to protect the firm from advanced persistent threats (APTs) targeting hybrid environments and mobile applications. Convey complex forensic and threat analyses via comprehensive presentations and incident post-mortems to senior stakeholders and engineering teams. Drive the implementation and optimization of security sensors and logging configurations across various platforms by collaborating with technology infrastructure teams to ensure full visibility for the SOC.

Job Requirements

Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering or a related field and one (1) year of experience in the job offered or a related Security Engineering role OR Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering or a related field and three (3) years of experience in the job offered or a related Security Engineering role. Prior work experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with each of the following: designing and auditing technical security controls for enterprise-scale on-premise and Cloud-based architectures, including network segmentation, firewall optimization, and least-privilege enforcement; utilizing industry-standard frameworks, such as MITRE CVE and CVSS to identify, classify, prioritize and drive the remediation of application and infrastructure vulnerabilities through technical controls; performing structured attack surface analysis to identify potential entry points and threat vectors and implementing technical mitigation strategies to harden systems during deployment; conducting comprehensive security risk assessments and maturity gap analyses aligned with industry-standard frameworks such as NIST CSF or CIS Controls; collaborating with cross-functional engineering teams during the design phase to integrate security requirements and \"Shift Left\" principles into the system development lifecycle (SDLC); and developing custom detections for SIEM/EDR platforms and executing proactive threat hunting missions using threat intelligence (e.g., MISP, industry collaborations) and deep analysis of security telemetry and logs.

©The Goldman Sachs Group, Inc., 2026. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.