Security Platform Engineer - Associate

Goldman Sachs Group, Inc.; Richardson (TX); On-site; USD 130,000 - 180,000; Full time

Job summary

Goldman Sachs Bank USA in Richardson, Texas seeks an Associate, Security Engineering to perform security assessments of business-initiated projects and drive adoption of security controls and best practices across networks, cloud, web services and mobile apps.

You will review third-party integrations, conduct risk analysis using NIST, and collaborate with a global team to improve detection capabilities, while communicating risk clearly to developers and engineers.

Qualifications

• Master’s degree in Cyber Security, Computer Science, or related field with 1 year of relevant experience.
• Alternatively, Bachelor’s degree with 3 years of relevant experience.
• Experience gathering evidence for compliance & control gap assessments (SOC1, CCPA, etc.).
• Experience analyzing risk using the NIST framework to assess GAPs and security controls.

Responsibilities

• Perform security assessments of business-initiated projects and drive adoption of security controls.
• Advise on security design for networks, cloud, web services, and mobile apps.
• Conduct risk reviews of 3rd party integrations against firm policies and standards.
• Collaborate with the global team to uplift the cyber program and improve detection capabilities.
• Identify and articulate security gaps to developers or engineers.

Skills

Security risk assessment

Regulatory compliance

Cloud security

Risk analysis

Communication with developers

Education

Master’s degree in Cyber Security

Bachelor’s degree in Cyber Security

Tools

Splunk

MS Excel

Azure

AWS

Active Directory

Windows Server

Job description

Goldman Sachs Bank USA in Richardson, Texas seeks an Associate, Security Engineering to perform security assessments of business-initiated projects and drive adoption of security controls and best practices across networks, cloud, web services and mobile apps.

You will review third-party integrations, conduct risk analysis using NIST, and collaborate with a global team to improve detection capabilities, while communicating risk clearly to developers and engineers.