Engineering Division - Dallas - Associate, Security Engineering - 10431284

The Goldman Sachs Group; Town of Texas (WI); On-site; USD 120,000 - 150,000; Full time

Job summary

The Goldman Sachs Group, Inc. seeks an Associate, Security Engineering in Dallas, TX to lead and support static and dynamic analysis, security awareness across S-SDLC, and drive embedding security controls in SDLC.

You will interface with business units, develop scalable secure SDLC solutions, gather requirements, perform testing, UAT, and deployment, and explore new technologies to strengthen the firm’s security posture across global lines.

Qualifications

• Master’s degree in CS/InfoSec or related field with 1 year experience, or a Bachelor’s with 3 years.
• Experience in application and infrastructure security (on premises and Cloud).
• Familiarity with OWASP and CWE best practices.
• Ability to assess software security threat vectors and conduct reviews.
• Experience embedding security in design phase and risk assessments.

Responsibilities

• Lead and support static and dynamic analysis implementations.
• Drive integration of embedded security controls within SDLC.
• Collaborate with Business Units to remediate issues from automated tools.
• Develop and maintain secure SDLC solutions.
• Design scalable security technology solutions leveraging internal and open-source services.
• Assist in requirements gathering, testing, UAT and deployment.
• Work with internal teams to develop solution designs.
• Identify new technologies to transform financial platforms.
• Engage in all SDLC phases to meet internal and regulatory requirements.
• Design and maintain robust testing suites.

Skills

Security engineering

OWASP

CWE

Threat modeling

Cloud security

SDLC integration

Education

Master's degree in CS/InfoSec

Bachelor's degree in CS/InfoSec

Tools

Cloud platforms

Static/Dynamic tools

Job description

Job Duties

Job Duties: Associate, Security Engineering with Goldman Sachs Services LLC in Dallas, Texas. Lead and support the implementation of static and dynamic analysis, as well as security awareness initiatives across all stages of the secure software development lifecycle (S-SDLC). Drive the integration and adoption of embedded application security controls within Software Development Life Cycle (SDLC). Interface with Business Units (BU) to help remediate issues identified by automated tools. Develop, enhance, support and maintain the Firm's secure software development lifecycle (S-SDLC) solutions in support of its global businesses. Design and implement high-quality, scalable and thoughtful technology solutions leveraging both internal and open-source services. Assist in requirements gathering, user story refinement, development, testing (unit, integration and regression), User Acceptance Testing (UAT) and deployment. Work with internal teams to help develop solution designs. Identify new external technologies that can be used to transform our financial businesses and internal platforms in innovative and disruptive ways. Work in all phases of the Secure Software Development Lifecycle (SDLC) to meet internal and regulatory requirements. Design, implement and maintain robust testing suites to enable secure, complete, and scalable solutions across our business lines.

Job Requirements

Master's degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and one (1) year of experience in the job offered or a related role OR Bachelor's degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and three (3) years of experience in the job offered or a related role.

Prior experience must include one (1) year (with a Master's degree) or three (3) years (with a Bachelor's degree) with:

• application and infrastructure architecture and security (on premise and Cloud)
• application security best practices including OWASP and CWE
• application security vulnerabilities and controls to remediate risks
• assessing and mitigating software security threat vectors, attack surface analysis, source code reviews, or vulnerability assessments
• working in shift left environment to help embed security in Design phase to implement security controls within system architecture
• and conducting infrastructure or application security risk assessments.

The Goldman Sachs Group, Inc., 2026. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.