Security Engineer Associate

Job Duties: Associate, Security Engineering with Goldman Sachs Services LLC in New York, New York. Performing security assessments of business-initiated projects helping to drive adoption of application and infrastructure security controls and best practices. Ensure security and privacy by design, including design process improvements, assessment of controls, data models, cryptographic implementation, and compliance and regulatory needs. Advise on leading edge engineering to protect the firm’s network from security risks related to client/server architectures, Cloud architectures, web services and mobile applications. Conduct risk reviews of 3rd party system integrations against firm policies and standards. Drive implementation of security controls in various platforms by working with technology teams, leveraging data analytics and machine learning techniques to enhance risk monitoring and inform control effectiveness. Collaborate with the global team and coordinate stakeholders across engineering and business leadership to continually operate and improve cyber program by providing input into uplift of sensory tools, detection tuning, and access to data sources to increase detection effectiveness while ensuring alignment between risk mitigation objectives and organizational goals. Highlight risk to developers or engineers and perform application vulnerability assessment and penetration testing of web applications. Perform code review of web application programming languages, perform assessments of technologies leveraging common web stack technologies, and perform architecture review of web applications. Build user-friendly and best-in-class intuitive dashboards for divisional executive leadership to track progress and make informed decisions for the security engineering's year-over-year book of work.

Job Requirements: Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and one (1) year of experience in the job offered or a related role OR Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and three (3) years of experience in the job offered or a related role. Prior work experience must include one (1) year with Master’s OR three (3) years with Bachelor’s with the following: application and infrastructure architecture and security (on premise and Cloud); working with application security vulnerabilities and controls to remediate risks including OWASP and CWE; assessing and mitigating software security threat vectors, threat modeling, attack surface analysis, security design reviews, source code reviews, penetration testing or vulnerability assessments; working in shift left environment to help embed security in design phase to implement security controls within system architecture; conducting infrastructure or application security risk assessments; supporting cross-functional tech risk programs by coordinating stakeholders across engineering, business leadership and regulatory teams and applying operations management principles to optimize delivery while ensuring alignment between risk mitigation objective and organizational goals; collaborating in high-level architectural and engineering discussions to assess security risks and strengthen application, infrastructure and cloud security strategies; and developing secure software delivery proposals to improve security controls, reduce vulnerability remediation costs, and mitigate operational risk.

Salary Range: Annual base salary for this New York, New York -based position is $137,000 - $183,000. 

©The Goldman Sachs Group, Inc., 2026. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.