This role pays less than
70%
of similar roles. Most pay
$150,300–$212,750
— the shaded band above.
At the midpoint, this role pays about
$158k
versus about
$182k
for comparable roles.
Based on 240 similar postings.
Employer
About Goldman Sachs
Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.
Goldman Sachs currently has
134 open roles
on FindRole.
Listed pay typically runs
$137,000–$250,000
across 55 roles with salary data.
Asset & Wealth Management – New York - Associate Security Engineering is a role within the Asset & Wealth Management division focused on embedding security and privacy by design into business-initiated projects. The Associate will perform security assessments of application and infrastructure architectures, including client/server, cloud, web, and mobile systems to ensure alignment with firm policies and regulatory requirements. Daily responsibilities include conducting secure code reviews for applications using Java, React, and Python, performing vulnerability assessments, and executing penetration testing. The role involves collaborating with global teams to enhance detection capabilities through improved tools and data sources while evaluating third-party system integrations. Key technical competencies include knowledge of OWASP and CWE standards, threat modeling, attack surface analysis, and shift left methodologies to identify security gaps and communicate technical risks clearly to stakeholders and developers throughout the software development life cycle.
Perform security assessments on business projects to ensure security and privacy by design.
Review system architectures across cloud, web, and mobile platforms to identify security gaps.
Conduct application security risk assessments including vulnerability assessments and penetration testing.
Perform secure code reviews for applications using Java, React, and Python.
Evaluate third-party system integrations and validate security controls across various platforms.
Enhance detection capabilities through tool tuning and the integration of new data sources.
Communicate technical findings and security risks to stakeholders and developers via reports and presentations.
What we're looking for
A Master’s degree in Cyber Security, Computer Science, Computer Engineering, or a related field and one year of experience in security engineering.
A Bachelor’s degree in Cyber Security, Computer Science, Computer Engineering, or a related field and three years of experience in security engineering.
Experience working with both application and infrastructure architecture and security on premise and in the Cloud.
Experience with application security best practices including OWASP and CWE.
Experience identifying vulnerabilities and implementing controls to remediate risks.
Application Security
Information Security Frameworks
Identity and Access Management (IAM)
Risk Management
SOX
Data Analysis
Artificial Intelligence
Cloud Platforms
Web Services
Distributed Systems
Control Testing
Python
C++
Java
Stochastic Calculus
Machine Learning
Time Series Analysis
Linear Regression
Bayesian Analysis
Quantitative Analysis
Financial Mathematics
Data Management
Statistical Analysis
Numerical Methods
Optimization