Associate Security Engineering Engineer

Goldman Sachs

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: Dallas, TX
Posted: 31 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $176k

$120k most similar roles pay here $226k

This listing doesn't post a salary. Most similar roles pay $150,000–$202,800.

Based on 240 similar postings.

Employer

About Goldman Sachs

Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.

Goldman Sachs currently has 134 open roles on FindRole.

Listed pay typically runs $137,000–$250,000 across 55 roles with salary data.

Most-posted roles

View all roles at Goldman Sachs

At a glance

TL;DR · Associate Security Engineering Engineer

Role Posting Log in to save

Associate, Security Engineering joins the Engineering Division to perform security assessments for business-initiated projects while driving the adoption of infrastructure and application security controls. The role involves ensuring security by design through data model reviews, cryptographic implementations, and compliance checks. You will collaborate with technical teams on major initiatives involving client/server architectures, cloud systems, web services, and mobile applications. Key responsibilities include conducting risk reviews for third-party integrations, performing architecture reviews of web applications, and verifying reports from penetration testing and vulnerability assessments. To succeed, you must possess expertise in OWASP and CWE standards, threat modeling, attack surface analysis, and shift-left security practices. You will also contribute to the cyber program by tuning detection tools and providing technical analyses to communicate risks effectively across various platforms and systems.

Skills

Application Security Infrastructure Security Cloud Architecture OWASP CWE Threat Modeling Penetration Testing Vulnerability Assessment Security Design Review Shift Left Web Services Mobile Applications Risk Assessment

What you'll do

Perform security assessments of business projects to drive adoption of infrastructure and application security controls.
Ensure security by design by evaluating data models, cryptographic implementations, and regulatory compliance needs.
Advise on engineering practices to protect networks from risks related to cloud architectures, web services, and mobile applications.
Conduct risk reviews of third-party system integrations against firm policies and standards.
Partner with infrastructure teams to implement security controls across various technology platforms.
Contribute to the cyber program by tuning detection tools and improving access to data sources.
Perform architecture reviews and verify reports related to application vulnerability assessments and penetration testing.
Communicate complex technical analyses and risk status through concise presentations for issue management tracking.

What we're looking for

Master’s degree in Cyber Security, Computer Science, Computer Engineering, or a related field and one year of experience in security engineering.
Bachelor’s degree in Cyber Security, Computer Science, Computer Engineering, or a related field and three years of experience in security engineering.
Technical understanding of both application and infrastructure architecture and security for on-premise and Cloud environments.
Experience working with application security best practices including OWASP and CWE.
Experience working with application security vulnerabilities and controls to remediate risks.
Experience assessing and mitigating software security threat vectors, threat modeling, attack surface analysis, security design reviews, penetration testing, or vulnerability assessments.
Experience working in a shift left environment to embed security into the design phase of system architecture.
Experience conducting infrastructure or application security risk assessments.

Save