Security Engineering Associate – NYC (SDLC & Cloud)

Goldman Sachs Group, Inc.; New York (NY); On-site; USD 132,000 - 184,000; Full time

Job summary

Goldman Sachs Group, Inc. in New York, NY seeks an Associate, Security Engineering to perform security assessments of business initiatives and drive adoption of rigorous controls and privacy‑by‑design practices.

Role includes reviewing architectures, conducting SDLC risk assessments, secure code reviews (Java, React, Python), assessing third‑party integrations, and communicating findings to stakeholders to support remediation efforts in a fast‑paced environment.

Qualifications

• Master’s degree in Cyber Security, CS, Computer Engineering or related field and 1 year of security engineering experience.
• Bachelor’s degree in Cyber Security, CS, Computer Engineering or related field and 3 years of security engineering experience.
• Experience with on‑prem and Cloud app/infrastructure security, threat modelling and security risk assessments.

Responsibilities

• Perform security assessments of business initiatives to promote security controls and privacy by design.
• Collaborate with global teams to embed security in major technology programs.
• Review architectures (client/server, web, mobile, cloud) to identify gaps and ensure policy alignment.
• Conduct application security risk assessments across the SDLC, including vulnerability testing.
• Perform secure code reviews (Java, React, Python) to identify and remediate vulnerabilities.
• Evaluate third‑party integrations and validate security controls across platforms.
• Communicate findings and remediation plans to stakeholders through reports and presentations.

Skills

Security engineering

Vulnerability assessments

Secure code reviews

Penetration testing

Education

Master’s degree in Cyber Security/CS/Computer Engineering or related field

Bachelor’s degree in Cyber Security/CS/Computer Engineering or related field

Tools

OWASP

CWE

Job description

Goldman Sachs Group, Inc. in New York, NY seeks an Associate, Security Engineering to perform security assessments of business initiatives and drive adoption of rigorous controls and privacy‑by‑design practices.

Role includes reviewing architectures, conducting SDLC risk assessments, secure code reviews (Java, React, Python), assessing third‑party integrations, and communicating findings to stakeholders to support remediation efforts in a fast‑paced environment.