VP, Cloud Security Architecture & App Risk

Goldman Sachs Group, Inc.; Dallas, Northern (TX, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Goldman Sachs is seeking a Security Engineer (Vice President) in Dallas to lead security reviews of cloud-native and on-premises systems, primarily focused on AWS, and to guide secure design across development teams.

You will mentor junior staff, perform threat modeling, and translate security findings into actionable mitigations for complex applications and infrastructure. Strong leadership, deep cloud security knowledge, and collaboration with CISO-linked teams are essential.

Qualifications

• 6+ years in application or cloud security roles.
• Experience with threat modeling or secure design reviews.
• Knowledge of OWASP Top 10 and cloud security gaps.
• Familiar with OWASP Testing Guide, NIST, SANS Top 20.
• Understanding secure authentication, encryption, and cloud controls.
• Experience with web/mobile/thick-client security assessments.

Responsibilities

• Perform security reviews for on-premise or cloud deployments (AWS).
• Act as security liaison for developers and architects within the Business Unit.
• Review security assessment reports from pentest and code reviews.
• Conduct risk-readouts with business units and propose mitigations.
• Develop secure cloud-native design patterns for AWS.
• Leverage AI/LLM tools to streamline security workflows.
• Mentor junior team members.

Skills

Application security

Cloud security

Threat modeling

Security architecture

OWASP Top 10

AWS

Education

MS in Computer Science or related field

Tools

Terraform

CloudFormation

AWS CDK

Job description

Goldman Sachs is seeking a Security Engineer (Vice President) in Dallas to lead security reviews of cloud-native and on-premises systems, primarily focused on AWS, and to guide secure design across development teams.

You will mentor junior staff, perform threat modeling, and translate security findings into actionable mitigations for complex applications and infrastructure. Strong leadership, deep cloud security knowledge, and collaboration with CISO-linked teams are essential.