This listing doesn't post a salary. Most similar roles pay
$151,475–$216,131.
Based on 239 similar postings.
Employer
About Goldman Sachs
Goldman Sachs is a leading global investment banking, securities, and investment management firm providing financial services to corporations, financial institutions, governments, and individuals.
Goldman Sachs currently has
134 open roles
on FindRole.
Listed pay typically runs
$137,000–$250,000
across 55 roles with salary data.
As a Security Engineer within the Global Cyber Defense and Intelligence team, you will join a technical group focused on identifying malicious activity and managing the lifecycle of vulnerabilities. You will work on an advanced threat detection and response team to proactively identify threats, deliver rapid responses, and develop detections using large data sets and analytic techniques like standard deviation, stack counting, outlier detection, and AI-based methods. Your daily responsibilities include performing host-based and network forensic investigations, tuning security controls, and building automated incident response workflows. You will utilize Python, PowerShell, or Bash to script automation while leveraging tools such as Volatility, Rekall, The Sleuth Kit, Autopsy, and EnCase. This role addresses the critical challenge of defending global business networks against cyber threats through detection engineering and real-time triage of security events across Windows, Linux, and cloud environments.
Analyze infrastructure incidents to determine if they qualify as legitimate security breaches.
Perform host-based and network forensic investigations to identify causes and preserve evidence.
Develop detection rules based on adversarial tactics, techniques, and procedures (TTPs).
Build anomaly detections using statistical principles like standard deviation, stack counting, and regex.
Script in Python, PowerShell, or Bash to automate incident response workflows and remediation activities.
Tune security sensors and controls to respond to an evolving threat landscape.
Participate in a 24x7 on-call rotation to remediate threats against the global network.
What we're looking for
Strong English verbal and written communication skills.
Strong presentation skills.
Proficient scripting skills in Python and PowerShell.
Advanced understanding of Linux Operating Systems.
Designing Cloud architecture including security setup, and Incident response strategy.
Hands-on experience in the use of Forensics toolkits such as Volatility, Rekall, The Sleuth Kit, Autopsy, and EnCase.
Ability to conduct cyber security investigations as a Level 2 analyst.
Understanding of how to use artificial intelligence tools to enhance productivity and security.
1-4 years' experience with expertise in triaging, analyzing & responding to security events and conducting digital forensics on Windows, MacOS or Linux (preferred).
Knowledge conducting incident response within a major public cloud such as AWS, Google, or Azure (preferred).
At least one of the following certifications: GNFA, GCFE, GCFA, CCFP, CFCE, ACE, OSCP, GCFR (preferred).
Experience in security monitoring and cyber defense against AI-powered cyber attacks (preferred).