Secure SDLC Associate - Dallas - Technology Risk

Goldman Sachs Group, Inc.

Dallas (TX)

On-site

USD 120,000 - 180,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

On-site health centers

Medical advocacy service

Employee Assistance Program (EAP)

Job summary

Goldman Sachs Group, Inc. is seeking a security-focused professional to lead and support the Secure SDLC across our global teams. You will drive implementation of static and dynamic analysis, AI-augmented capabilities, and embedded security controls within SDLC processes.

You will work with internal stakeholders to design scalable, high-quality security solutions, conduct rigorous testing, and ensure regulatory alignment across our financial platforms.

Qualifications

Master's degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field with 1 year of related experience OR
Bachelor's degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field with 3 years of related experience.
Strong foundation in application security best practices and vulnerability remediation, including OWASP Top 10 and CWE.
Experience embedding security in the SDLC, including design reviews and threat modeling.

Responsibilities

Lead and support Secure SDLC implementation across multiple teams.
Evaluate and adopt AI-augmented security tooling within Secure SDLC services.
Develop and maintain secure SDLC solutions for global businesses.
Design scalable, high-quality security technology solutions using internal and open-source services.
Collaborate with business units to remediate issues identified by automated tools.

Skills

Application security

Threat modeling

OWASP Top 10

OWASP LLM Top 10

Security design reviews

Source code reviews

Penetration testing

Education

Master's degree in Computer Science or related field

Bachelor's degree in Computer Science or related field

Tools

SAST tooling

DAST tooling

Job description

Job Description

Job Duties

Lead and support the implementation of static and dynamic analysis, as well as security awareness initiatives across all stages of the Secure Software Development Lifecycle (Secure SDLC).

Support the evaluation and adoption of AI-augmented capabilities within Secure SDLC services, including static and dynamic analysis tooling (SAST, DAST, IaC, Control Gating, etc.).

Drive the integration and adoption of embedded application security controls within SDLC ecosystem.

Interface with Business Units to help build secure applications and remediate issues identified by automated tools.

Develop, enhance, support and maintain the Firm's Secure SDLC solutions in support of its global businesses.

Design and implement high-quality, scalable and thoughtful technology solutions leveraging both internal and open-source services.

Assist in requirements gathering, user experience refinement, development, testing (unit, integration and regression), User Acceptance Testing (UAT), Deployment, and Quality Assurance (QA).

Work with internal teams to help develop secure solution designs.

Identify new external technologies that can be used to transform our financial businesses and internal platforms in innovative and disruptive ways.

Work in all phases of the Secure SDLC to meet internal and regulatory requirements.

Design, implement and maintain robust testing suites to enable secure, complete, and scalable solutions across our business lines.

Maintain awareness of emerging technologies (including but not limited to) agentic AI workflows and their potential application to Secure SDLC processes.

Master's degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and one (1) year of experience in the job offered or a related role.

Bachelor's degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and three (3) years of experience in the job offered or a related role.

Special Skills and/or Licenses Required to Perform the Job

Prior experience should include one (1) year (with a Master's degree) or three (3) years (with a Bachelor's degree) with:

Application and infrastructure architecture and security (on premise and Cloud).

Application security best practices including OWASP Top 10, OWASP LLM Top 10, and CWE.

Application security vulnerabilities and controls to remediate risks.

Assessing and mitigating software security threat vectors, threat modeling, attack surface analysis, security design reviews, source code reviews, penetration testing or vulnerability assessments.

Working in shift left environment to help embed security in Design phase to implement security controls within system architecture.

Conducting infrastructure or application security risk assessments.

Foundational understanding of Large Language Model (LLM) behaviors, including common strengths and weaknesses (e.g., hallucination, behavior inconsistency, context limitations, reproducibility and verification, etc.).

General familiarity with agentic AI workflows and their role in software development and security tooling.

Job Info

Job Identification 179647
Job Category Associate
Posting Date 08/12/2026, 01:28 PM
Locations Dallas, TX, United States

Healthcare & Medical Services

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally

Financial Wellness & Retirement

We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees’ priorities.

Health

We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also provide state-of-the-art on-site health centers in certain offices.

Fitness

To encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount).

Child Care

We offer on-site child care centers that provide full-time and emergency back-up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.

Benefits at Goldman Sachs