This listing doesn't post a salary. Most similar roles pay
$151,475–$203,875.
Based on 240 similar postings.
Employer
About Goldman Sachs
Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.
Goldman Sachs currently has
134 open roles
on FindRole.
Listed pay typically runs
$137,000–$250,000
across 55 roles with salary data.
Engineering Division - Dallas - Associate, Security Engineering - 10427737 is a role within the Engineering Division focused on securing business-initiated projects and technologies. The Associate will perform security assessments for python-based web stacks and advise on engineering solutions to protect network and Cloud architectures, specifically AWS or Azure environments. Key responsibilities include integrating "detection by design" principles into the system development lifecycle, conducting threat hunting missions using statistical analysis like stack counting, and developing incident response playbooks against advanced persistent threats. The role requires expertise in cryptographic implementations, data model assessments, and infrastructure hardening. Candidates will utilize industry-standard frameworks including MITRE CVE, CVSS, NIST CSF, and CIS Controls to identify vulnerabilities. Technical tasks involve tuning SIEM/EDR detection logic, analyzing security telemetry, and optimizing sensor configurations to ensure full visibility for the security operations center.
Perform security assessments on business projects and technologies to ensure security and privacy by design.
Advise engineering teams on protecting network and cloud architectures from risks related to web services and mobile applications.
Identify security control gaps and implement technical mitigations, including cryptographic implementations and data model assessments.
Provide technical input to improve detection logic for SIEM/EDR tools and enhance logging telemetry.
Execute hypothesis-driven threat hunting missions using threat intelligence and statistical analysis to find malicious activity.
Develop detection strategies and incident response playbooks to protect against advanced persistent threats.
Communicate complex forensic analyses and incident post-mortems to senior stakeholders and engineering teams.
Optimize security sensors and logging configurations across various platforms to ensure full visibility for the SOC.
What we're looking for
A Master's degree in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering, or a related field and one year of relevant experience.
A Bachelor's degree in Cyber Security, Computer Science, Electrical Engineering, Computer Engineering, or a related field and three years of relevant experience.
Experience designing and auditing technical security controls for enterprise-scale on-premise and Cloud-based architectures.
Experience utilizing industry-standard frameworks like MITRE CVE and CVSS to identify and remediate vulnerabilities.
Experience performing structured attack surface analysis and implementing mitigation strategies to harden systems.
Experience conducting security risk assessments and maturity gap analyses aligned with NIST CSF or CIS Controls.
Experience collaborating with engineering teams to integrate "Shift Left" principles into the system development lifecycle (SDLC).
Experience developing custom detections for SIEM/EDR platforms and executing proactive threat hunting missions using threat intelligence.