Security Engineer — App & Cloud Security

Goldman Sachs Bank AG; New York (NY); On-site; USD 132,000 - 184,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Short-term Disability

Long-term Disability

Life Insurance

AD&D Insurance

Business Travel Insurance

Job summary

Goldman Sachs is seeking an Associate Security Engineer in New York to drive adoption of security controls across business initiatives. You will perform security assessments, collaborate with global teams, and review architectures for gaps to ensure policy alignment.

You will conduct application security risk assessments across the SDLC, perform vulnerability testing, and review secure code in Java, React, and Python.

Qualifications

• Master’s or Bachelor’s degree in Cyber Security, Computer Science, Computer Engineering or related field.
• 1 year of security engineering experience (Master’s) or 3 years (Bachelor’s).
• Experience with application and infrastructure security on premise and Cloud.

Responsibilities

• Perform security assessments of business-initiated projects to drive adoption of security controls.
• Collaborate with global teams on technology initiatives to embed security early.
• Review architectures (client/server, cloud, web, mobile) for gaps and policy alignment.
• Conduct application security risk assessments across the SDLC and perform vulnerability testing.
• Perform secure code reviews for Java, React, and Python.
• Evaluate third-party integrations and validate security controls across platforms.
• Communicate findings to stakeholders to support remediation.

Skills

Application security

Cloud security

Threat modeling

Vulnerability assessments

Secure code reviews

Education

Master's degree in Cyber Security / CS / CE

Bachelor's degree in Cyber Security / CS / CE

Tools

OWASP

CWE

Job description

Goldman Sachs is seeking an Associate Security Engineer in New York to drive adoption of security controls across business initiatives. You will perform security assessments, collaborate with global teams, and review architectures for gaps to ensure policy alignment.

You will conduct application security risk assessments across the SDLC, perform vulnerability testing, and review secure code in Java, React, and Python.