Secure SDLC Associate: Build Secure, Scalable Software

Goldman Sachs; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Goldman Sachs is seeking a Security Engineer in Technology Risk focused on Secure SDLC to empower developers with secure coding practices and modern tooling. You will lead static and dynamic analysis initiatives, evaluate AI-augmented capabilities, and integrate embedded application security controls across the SDLC.

You will collaborate with business units to remediate issues, design scalable security solutions, and stay ahead of emerging technologies and regulatory requirements.

Qualifications

• Master's degree in Computer Science, Computer Engineering, Information Security, or a related field with at least one year of related experience.
• Bachelor's degree in Computer Science, Computer Engineering, Information Security, or a related field with at least three years of related experience.
• Strong knowledge of Secure SDLC principles and security controls across development stages.
• Experience with SAST, DAST, IaC security and security tooling within a cloud/on-premise environment.
• Familiarity with OWASP Top 10, CWE and threat modeling.

Responsibilities

• Lead and support static and dynamic analysis initiatives across the Secure SDLC.
• Evaluate and adopt AI-augmented security capabilities within Secure SDLC services.
• Drive integration of embedded security controls within SDLC ecosystem.
• Collaborate with Business Units to remediate issues identified by automated tools.
• Design, implement and maintain secure SDLC solutions across global businesses.

Skills

Threat modeling

SDLC security

AI security awareness

Security testing

Shift-left security

Vulnerability assessment

Education

Master's degree in CS/CE/InfoSec

Bachelor's degree in CS/CE/InfoSec

Tools

SAST

DAST

IaC security

Control Gating

Security tooling integration

Job description

Goldman Sachs is seeking a Security Engineer in Technology Risk focused on Secure SDLC to empower developers with secure coding practices and modern tooling. You will lead static and dynamic analysis initiatives, evaluate AI-augmented capabilities, and integrate embedded application security controls across the SDLC.

You will collaborate with business units to remediate issues, design scalable security solutions, and stay ahead of emerging technologies and regulatory requirements.