Security Engineering Associate - Cloud & App Risk

The Goldman Sachs Group; New York (NY); On-site; USD 137,000 - 183,000; Full time

Job summary

The Goldman Sachs Group is seeking an Associate, Security Engineering in New York, NY. You will perform security assessments, advise on security by design, and drive implementation of controls across on-premises and cloud environments.

You will collaborate with engineering and business leadership to uplift risk monitoring, perform code reviews, vulnerability assessments, and architecture reviews while building intuitive dashboards for executives to track progress and inform decisions.

Qualifications

• Master’s or Bachelor’s degree in Cyber Security, CS or CE with required experience.
• Experience in application and infrastructure security (on prem and Cloud).
• Experience with vulnerability assessments, penetration testing and security design reviews.
• Experience in threat modeling and attack surface analysis.
• Collaborates with cross-functional teams to embed security in design.

Responsibilities

• Perform security assessments of business-initiated projects and drive security controls adoption.
• Advise on security by design, data models, cryptographic implementation, and regulatory needs.
• Conduct risk reviews of 3rd party integrations against firm policies and standards.
• Lead security control implementations across platforms with tech teams and analytics.
• Build dashboards for leadership to track security program year-over-year progress.

Skills

Security assessments

Threat modeling

Penetration testing

Vulnerability assessments

Application security

Cloud security

Code reviews

Architecture reviews

Risk management

Education

Master's degree in Cyber Security, Computer Science, Computer Engineering or related field

Bachelor's degree in Cyber Security, Computer Science, Computer Engineering or related field

Tools

OWASP

CWE

Job description

The Goldman Sachs Group is seeking an Associate, Security Engineering in New York, NY. You will perform security assessments, advise on security by design, and drive implementation of controls across on-premises and cloud environments.

You will collaborate with engineering and business leadership to uplift risk monitoring, perform code reviews, vulnerability assessments, and architecture reviews while building intuitive dashboards for executives to track progress and inform decisions.