Threat Detection & Security Engineering Associate

Goldman Sachs Bank AG; Dallas, Northern (TX, KY); Hybrid; USD 115,000 - 185,000; Full time

Benefits offered by this job

Healthcare insurance

Vacation policy

Employee assistance program

On-site health centers

Job summary

Goldman Sachs in Dallas seeks an Associate Security Engineer in Technology Risk to join an advanced threat detection and response team. You will develop detections from large data sets and automate incident workflows, using Python, PowerShell, and Bash to respond to real-time events.

The role focuses on security sensors, data sets, and proactive threat management across GS technologies, requiring hands-on forensics and cloud security experience.

Qualifications

• Hands-on cyber security investigations as a Level 2 analyst.
• Experience with Windows, Linux and Network security.
• Experience using security data for detection engineering and live intrusions.

Responsibilities

• Analyze potential infrastructure security incidents to determine if a breach occurred.
• Perform host and network forensic investigations and preserve evidence.
• Participate in 24x7 on-call coverage to remediate threats.
• Tune security sensors and security controls against evolving threats.
• Lead security projects with planning, implementation and coordination.
• Develop use cases and tune detection rules for higher efficacy.
• Build anomaly detections using statistical methods and regex.
• Automate incident response workflows with Python/PowerShell/Bash.

Skills

Python

PowerShell

Linux

English communication

Incident response

Education

Bachelor's degree or equivalent

Tools

Volatility

Rekall

The Sleuth Kit

Autopsy

EnCase

Job description

Goldman Sachs in Dallas seeks an Associate Security Engineer in Technology Risk to join an advanced threat detection and response team. You will develop detections from large data sets and automate incident workflows, using Python, PowerShell, and Bash to respond to real-time events.

The role focuses on security sensors, data sets, and proactive threat management across GS technologies, requiring hands-on forensics and cloud security experience.