Platform Solutions-Richardson- Associate, Security Engineering- 10446228

Goldman Sachs Group, Inc.; Richardson (TX); On-site; USD 130,000 - 180,000; Full time

Job summary

Goldman Sachs Bank USA in Richardson, Texas seeks an Associate, Security Engineering to perform security assessments of business-initiated projects and drive adoption of security controls and best practices across networks, cloud, web services and mobile apps.

You will review third-party integrations, conduct risk analysis using NIST, and collaborate with a global team to improve detection capabilities, while communicating risk clearly to developers and engineers.

Qualifications

• Master’s degree in Cyber Security, Computer Science, or related field with 1 year of relevant experience.
• Alternatively, Bachelor’s degree with 3 years of relevant experience.
• Experience gathering evidence for compliance & control gap assessments (SOC1, CCPA, etc.).
• Experience analyzing risk using the NIST framework to assess GAPs and security controls.

Responsibilities

• Perform security assessments of business-initiated projects and drive adoption of security controls.
• Advise on security design for networks, cloud, web services, and mobile apps.
• Conduct risk reviews of 3rd party integrations against firm policies and standards.
• Collaborate with the global team to uplift the cyber program and improve detection capabilities.
• Identify and articulate security gaps to developers or engineers.

Skills

Security risk assessment

Regulatory compliance

Cloud security

Risk analysis

Communication with developers

Education

Master’s degree in Cyber Security

Bachelor’s degree in Cyber Security

Tools

Splunk

MS Excel

Azure

AWS

Active Directory

Windows Server

Job description

Job Duties: Associate, Security Engineering with Goldman Sachs Bank USA in Richardson, Texas.Responsible for performing security assessments of business-initiated projects helping to drive adoption of application and infrastructure security controls and best practices. Ensure security and privacy by design, including design process improvements, assessment of controls, data models, cryptographic implementation, and compliance and regulatory needs. Advise on leading edge engineering to protect the firm’s network from security risks related to client/server architectures, Cloud architectures, web services and mobile applications. Conduct risk reviews of 3rd party system integrations against firm policies and standards. Collaborate with the global team to continually operate and improve a world-class cyber program by providing input into the uplift of sensory tools, detection tuning, and access to data sources to increase detection effectiveness. Review security controls and how they apply to different designs and systems in order to identify security gaps. Highlight and articulate risk to developers or engineers.

Job Requirements:Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and one (1) year of experience in the job offered or a related role OR Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and three (3) years of experience in the job offered or a related role. Prior work experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with each of the following: assisting on gathering evidence for compliance & control gap assessments such as SOC1, CCPA, ETC; assisting on analyzing & grading risk in the regulatory framework such as NIST to determine the level of risk associated with GAPs identified; analyzing potential security vulnerabilities on tools or components, such as Windows Servers, Active Directory, Azure or AWS Cloud, and on-premises software and systems; analyzing performance and design for security controls implemented in the hybrid, public or private cloud environment, utilizing various reporting or analytical tools, such as Splunk and MS Excel, or to generate reports; and performing security audits to analyze & mitigate potential security vulnerabilities on tools or components, such as Azure, AWS, and on-premises software and systems.

©The Goldman Sachs Group, Inc., 2026. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.