Associate, Security Engineering

Goldman Sachs

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: New York, NY
Salary: $137,000–$183,000 / yr
Posted: 31 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $177k

This role $160k

$119k most similar roles pay here $225k

This role pays less than 62% of similar roles. Most pay $149,500–$204,950 — the shaded band above. At the midpoint, this role pays about $160k versus about $177k for comparable roles.

Based on 240 similar postings.

Employer

About Goldman Sachs

Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.

Goldman Sachs currently has 134 open roles on FindRole.

Listed pay typically runs $137,000–$250,000 across 55 roles with salary data.

Most-posted roles

View all roles at Goldman Sachs

At a glance

TL;DR · Associate, Security Engineering

Role Posting Log in to save

Global Banking & Markets- New York - Associate, Security Engineering joins the Global Banking & Markets team to perform security assessments for business-initiated projects and drive the adoption of infrastructure security controls. The role involves ensuring security by design through data model analysis, cryptographic implementation, and compliance reviews. You will advise on engineering to protect networks from risks related to cloud architectures, web services, and mobile applications while conducting risk reviews of third-party integrations. Day-to-day tasks include performing application vulnerability assessments, penetration testing, and source code reviews for web programming languages. You will leverage data analytics and machine learning to enhance risk monitoring and build intuitive dashboards for executive leadership. Key technical competencies include OWASP and CWE standards, threat modeling, attack surface analysis, and managing security within a shift left environment to mitigate risks across on-premise and cloud systems.

Skills

Application Security Infrastructure Security Cloud Security OWASP CWE Penetration Testing Vulnerability Assessment Source Code Review Threat Modeling Data Analytics Machine Learning Web Services Mobile Applications Security Design Review Shift Left

What you'll do

Perform security assessments of business projects to drive adoption of infrastructure and application security controls.
Ensure security by design through assessment of data models, cryptographic implementations, and regulatory compliance.
Advise on engineering strategies to protect networks from risks related to cloud architectures and mobile applications.
Conduct risk reviews of third-party system integrations against firm policies and standards.
Utilize data analytics and machine learning to enhance risk monitoring and control effectiveness.
Perform application vulnerability assessments, penetration testing, and source code reviews for web applications.
Build intuitive dashboards for executive leadership to track security engineering progress and decision-making.

What we're looking for

A Master's degree in Cyber Security, Computer Science, Computer Engineering, or a related field and one year of relevant experience is required.
A Bachelor's degree in Cyber Security, Computer Science, Computer Engineering, or a related field and three years of relevant experience is required.
Experience must include application and infrastructure architecture and security for both on-premise and Cloud environments.
Experience must include working with application security vulnerabilities and controls to remediate risks including OWASP and CWE.
Experience must include assessing software security threat vectors, threat modeling, attack surface analysis, security design reviews, source code reviews, penetration testing, or vulnerability assessments.
Experience is required in a shift left environment to embed security into the design phase of system architecture.
Experience is required in conducting infrastructure or application security risk assessments and supporting cross-functional tech risk programs.
Experience is required in collaborating on high-level architectural discussions and developing secure software delivery proposals.

Save