Security Engineering Associate - Embedded AppSec & SDLC

Goldman Sachs; Dallas (TX); On-site; USD 120,000 - 165,000; Full time

Job summary

Goldman Sachs is seeking an Associate, Security Engineering in Dallas to lead security analysis across the SDLC and to drive embedded security controls within the SDLC. You will interface with business units to remediate issues uncovered by automated tools and help evolve secure SDLC solutions globally.

The role requires master’s or bachelor’s degrees in CS/Information Security with 1–3 years of related security experience, including OWASP/CWE practices and threat analysis.

Qualifications

• Master’s or Bachelor’s degree in Computer Science, Information Security, or a related field.
• 1 year (with a Master’s degree) or 3 years (with a Bachelor’s degree) of relevant security experience.
• Experience with OWASP and CWE guidelines and secure SDLC practices.

Responsibilities

• Lead and support static and dynamic analysis as part of secure SDLC initiatives.
• Drive integration of embedded application security controls across SDLC.
• Interface with Business Units to remediate issues from automated tools.
• Develop and maintain secure SDLC solutions for global businesses.
• Design and implement scalable technology solutions using internal and open-source services.
• Assist in requirements, development, testing, UAT, and deployment activities.
• Identify external technologies to transform business platforms with security in mind.
• Work in all SDLC phases to meet internal and regulatory requirements.
• Design, implement and maintain robust testing suites for secure solutions.

Skills

App security

Threat modeling

Vulnerability assessment

Code review

Shift-left security

OWASP

CWE

Cloud security

Education

Master’s degree in CS/Information Security

Bachelor’s degree in CS/Information Security

Job description

Goldman Sachs is seeking an Associate, Security Engineering in Dallas to lead security analysis across the SDLC and to drive embedded security controls within the SDLC. You will interface with business units to remediate issues uncovered by automated tools and help evolve secure SDLC solutions globally.

The role requires master’s or bachelor’s degrees in CS/Information Security with 1–3 years of related security experience, including OWASP/CWE practices and threat analysis.