Platform Security Engineering Associate

Goldman Sachs; Richardson (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Goldman Sachs Bank USA in Richardson, Texas seeks an Associate, Security Engineering to perform security assessments of business projects and advance application and infrastructure security controls.

The role emphasizes security by design, regulatory compliance, and risk identification across client/server, cloud, and hybrid environments. Collaboration with global teams drives improvements in detection, data access, and policy adherence.

Qualifications

• Master’s degree in Cyber Security, Computer Science, Computer Engineering or related field plus 1 year of experience, or Bachelor’s degree plus 3 years of experience.
• Experience assisting on evidence gathering for compliance & control gap assessments (SOC1, CCPA, ETC).
• Experience analyzing risk per regulatory frameworks (NIST) to determine risk levels for GAPs identified.
• Experience analyzing security vulnerabilities in tools/systems (Windows Server, AD, cloud, on‑prem).
• Experience evaluating security controls in hybrid/cloud environments and generating/reading reports.

Responsibilities

• Perform security assessments of business-initiated projects and drive adoption of security controls.
• Advise on security by design, including control/encryption implementations and regulatory compliance needs.
• Review security controls across designs to identify gaps and articulate risk to developers or engineers.
• Collaborate with the global team to uplift the cyber program, enhance detections, and access data sources for risk reduction.

Skills

Risk assessment

Regulatory frameworks

Security design

Threat modeling

Education

Master’s degree in Cyber Security or related field

Bachelor’s degree in Cyber Security or related field

Tools

Windows Server

Active Directory

Azure

AWS

Splunk

MS Excel

Job description

Goldman Sachs Bank USA in Richardson, Texas seeks an Associate, Security Engineering to perform security assessments of business projects and advance application and infrastructure security controls.

The role emphasizes security by design, regulatory compliance, and risk identification across client/server, cloud, and hybrid environments. Collaboration with global teams drives improvements in detection, data access, and policy adherence.