Job description

Job Duties: Associate, Security Engineering with Goldman Sachs & Co. LLC in New York, New York. Perform security assessments of business-initiated projects to drive adoption of application and infrastructure security controls and best practices, ensuring security and privacy by design. Collaborate with technical and global teams on major technology initiatives to ensure security is embedded early and to enhance detection capabilities through improved tools, tuning, and data sources. Review system architectures, such as client/server, cloud, web, mobile, and security controls to identify gaps and ensure alignment with firm policies, standards, and regulatory requirements. Conduct application security risk assessments across the SDLC, including vulnerability assessments and penetration testing of internal and external applications in coordination with vulnerability management teams. Perform secure code reviews for applications using languages such as Java, React, and Python to identify vulnerabilities and strengthen security posture. Evaluate third-party system integrations and work with infrastructure teams to implement and validate security controls across platforms. Communicate technical findings, risks, and security gaps clearly to stakeholders, developers, and engineers through reporting and presentations to support issue tracking and remediation. Job Requirements: Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and one (1) year of experience in the job offered or a related Security Engineering role OR Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and three (3) years of experience in the job offered or a related Security Engineering role. Prior work experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with each of the following: working with both application and infrastructure architecture and security on premise and Cloud; working with application security best practices including OWASP and CWE; working with application security vulnerabilities and controls to remediate risks; assessing and mitigating software security threat vectors, threat modeling, attack surface analysis, security design reviews, source code reviews, penetration testing or vulnerability assessments; working in shift left environment to help embed security in Design phase to implement security controls within system architecture; and conducting infrastructure or application security risk assessments. Salary Range: Annual base salary for this New York, New York - based position is $132,000 - $184,400. ©The Goldman Sachs Group, Inc., 2026. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.

Requirements

Requirements not extracted — see the original description below.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

javareactpython

Platform: goldman-sachs
Effort: medium