VP Security Engineer: Cloud & AppSec Architect

Goldman Sachs; Dallas (TX); On-site; USD 140,000 - 200,000; Full time

Job summary

Goldman Sachs Technology Risk Advisory seeks an experienced security professional to lead architecture reviews and risk assessments for cloud and on-premise deployments, with a strong emphasis on AWS. You will work with engineers and architects to embed secure design in the SDLC and CI/CD pipelines.

You will review pentest findings, articulate risks to business stakeholders, and mentor junior team members while advancing secure native cloud capabilities and pragmatic security controls across the

Qualifications

• 6+ years in application security or cloud security roles.
• Experience with threat modeling or secure design reviews.
• Familiarity with OWASP Top 10 and cloud security gaps.
• Knowledge of OWASP Testing Guide, OWASP ASVS, NIST, SANS Top 20.
• Understanding cryptography concepts and secure deployment patterns.
• Ability to analyze OAuth, SAML, and OIDC interactions for gaps.
• Strong written and oral communication for technical and management audiences.

Responsibilities

• Perform software architecture design reviews for on-premise or cloud deployments, with a focus on AWS.
• Serve as an Application security liaison for the developers and architects in the respective Business Unit.
• Review security assessment reports from pentest and code review engagements.
• Conduct Read-out Calls with the business to articulate risk and recommend a mitigation strategy.
• Develop secure architecture design patterns, particularly for cloud-native applications on AWS.
• Leverage and integrate AI/LLM-driven tools to streamline security review workflows
• Mentor other junior members of the team.

Skills

Application security

Cloud security

Threat modeling

Secure design reviews

OWASP

AWS security

Penetration testing

Security tooling

Communication

Education

MS in Computer Science

Cybersecurity

Information Security

Tools

Terraform

CloudFormation

AWS CDK

Job description

Goldman Sachs Technology Risk Advisory seeks an experienced security professional to lead architecture reviews and risk assessments for cloud and on-premise deployments, with a strong emphasis on AWS. You will work with engineers and architects to embed secure design in the SDLC and CI/CD pipelines.

You will review pentest findings, articulate risks to business stakeholders, and mentor junior team members while advancing secure native cloud capabilities and pragmatic security controls across the