Secure SDLC Associate: AI-Driven Security & Testing

The Goldman Sachs Group; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

The Goldman Sachs Group is seeking a lead for Secure SDLC security, guiding static and dynamic analysis and security awareness across all SDLC stages. The role supports AI-augmented capabilities and embedding security controls in embedded applications.

You will drive tooling adoption (SAST, DAST, IaC), collaborate with Business Units to remediate issues, and design scalable security solutions for global platforms.

Qualifications

• Experience applying secure SDLC practices across multiple projects.
• Experience with security testing: static, dynamic, and software composition.
• Familiarity with LLM security concepts including hallucination and verification.

Responsibilities

• Lead and support static and dynamic analysis implementations.
• Evaluate and adopt AI-augmented capabilities within Secure SDLC services.
• Drive integration of embedded application security controls.
• Interface with Business Units to secure applications and remediate issues.
• Develop and maintain Secure SDLC solutions for global businesses.
• Design scalable technology solutions leveraging internal and open-source services.
• Assist in requirements gathering, development, testing, deployment, and QA.
• Work with internal teams to develop secure solution designs.

Skills

Security analysis

Threat modeling

Vulnerability assessment

Security in SDLC

Shift-left security

Education

Master's degree in Computer Science/Information Security/related field

Bachelor's degree in Computer Science/Computer Engineering/Information Security/related field

Tools

SAST

DAST

IaC security tools

Job description

The Goldman Sachs Group is seeking a lead for Secure SDLC security, guiding static and dynamic analysis and security awareness across all SDLC stages. The role supports AI-augmented capabilities and embedding security controls in embedded applications.

You will drive tooling adoption (SAST, DAST, IaC), collaborate with Business Units to remediate issues, and design scalable security solutions for global platforms.