Security Engineering Associate — Build Secure Cloud & Apps

New York Times; New York (NY); On-site; USD 137,000 - 183,000; Full time

Job summary

Goldman Sachs Services LLC in New York, NY, seeks an Associate, Security Engineering to perform security assessments of business-initiated projects and drive adoption of application and infrastructure security controls and best practices.

The role requires a Master’s degree or Bachelor’s degree with several years of experience in security, including threat modeling, vulnerability assessments, and secure software delivery.

Qualifications

• Requires Master’s degree in Cyber Security, Computer Science, Computer Engineering or related field with 1 year of related experience.
• Or a Bachelor’s degree in Cyber Security, Computer Science, Computer Engineering or related field with 3 years of related experience.
• Experience with application and infrastructure security in cloud and on‑premise environments; security design reviews, threat modeling, and risk mitigation.

Responsibilities

• Perform security assessments of business-initiated projects and drive adoption of security controls.
• Assess controls, data models, cryptographic implementations, and regulatory needs.
• Collaborate with stakeholders across engineering, business leadership and regulatory teams to strengthen security strategies.
• Support secure software delivery and embed security in the design phase.

Skills

Security assessments

Threat modeling

OWASP

Vulnerability assessments

Cloud security

Code security reviews

Education

Master’s degree in Cyber Security or related field

Bachelor’s degree in Cyber Security or related field

Job description

Goldman Sachs Services LLC in New York, NY, seeks an Associate, Security Engineering to perform security assessments of business-initiated projects and drive adoption of application and infrastructure security controls and best practices.

The role requires a Master’s degree or Bachelor’s degree with several years of experience in security, including threat modeling, vulnerability assessments, and secure software delivery.