Security Engineering Associate - Cloud & App Risk Lead

Socket.dev; New York (NY); On-site; USD 137,000 - 183,000; Full time

Job summary

Goldman Sachs Services LLC in New York, NY seeks an Associate, Security Engineering to perform security assessments, advise on secure design, and drive adoption of controls across cloud and on-premise environments. You will conduct risk reviews of third-party integrations and build analytics dashboards to track security initiatives.

The role requires a Master’s or Bachelor’s in Cyber Security/CS/Engineering and experience in app security, threat modeling, and secure software delivery.

Qualifications

• Master’s or Bachelor’s degree in Cyber Security, Computer Science, Computer Engineering or related field with required experience.
• Experience in application and infrastructure security for on-premise and cloud environments.
• Proficient in evaluating security vulnerabilities, threat modeling, attack surface analysis, and security design reviews.

Responsibilities

• Perform security assessments of business-initiated projects and drive adoption of security controls and best practices.
• Advise on secure design, data models, cryptographic implementation, and regulatory compliance.
• Lead risk reviews of third-party integrations and implement security controls across platforms.

Skills

Security engineering

Threat modeling

Penetration testing

Vulnerability assessments

Code review

Cloud security

Education

Master’s or Bachelor’s degree in Cyber Security/CS/Engineering

Tools

AWS

Azure

GCP

Job description

Goldman Sachs Services LLC in New York, NY seeks an Associate, Security Engineering to perform security assessments, advise on secure design, and drive adoption of controls across cloud and on-premise environments. You will conduct risk reviews of third-party integrations and build analytics dashboards to track security initiatives.

The role requires a Master’s or Bachelor’s in Cyber Security/CS/Engineering and experience in app security, threat modeling, and secure software delivery.