Goldman Sachs is a leading global investment banking, securities and investment management firm. They are seeking an Associate in Security Engineering to conduct cloud security assessments, identify potential risks, and collaborate with engineering teams to embed security best practices throughout the software development lifecycle.
Conduct comprehensive cloud security assessments, evaluating designs, configurations, and implementations across various cloud service providers (CSPs)
Identify and analyze potential security risks, vulnerabilities, and misconfigurations within cloud environments and applications
Perform software architecture design reviews for cloud deployments
Develop secure architecture design patterns, particularly for cloud-native applications
Develop, evaluate, and document security measures, controls, and guardrails to protect data, applications, APIs, and infrastructure in the cloud
Collaborate with engineering and development teams to embed security best practices throughout the software development lifecycle (SDLC) and CI/CD pipelines for cloud-native applications
Provide technical advisory services on cloud security to internal stakeholders, ensuring alignment with firm-wide security policies and industry best practices
Develop and maintain scripts and automated solutions to streamline security processes, vulnerability identification, and compliance checks within cloud environments
Stay updated on emerging cloud security threats, technologies, and regulatory requirements
Contribute to incident response and remediation efforts related to cloud security events as required
Qualification
Required
Demonstrated proficiency and hands-on experience in scripting and coding, particularly with languages such as Python, PowerShell, or Bash, for automation, data analysis, or security tooling
Fundamental understanding of cybersecurity principles, security controls, and common security domains (e.g., network security, identity and access management, data protection, vulnerability management)
A foundational grasp of cloud computing concepts and architectures, with basic familiarity and understanding of at least one major Cloud Service Provider (e.g., Amazon Web Services, Microsoft Azure, Google Cloud Platform, Oracle Cloud). Prior project experience in cloud and conceptual understanding is essential
Bachelor's degree in Computer Science, Information Security, or a related technical field, or equivalent practical experience
Strong analytical and problem-solving skills with an investigative mindset
Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences
Preferred
Prior experience in a security-focused role within financial services or other highly regulated industries
Familiarity with industry security frameworks and standards (e.g., NIST, ISO 27001, CIS Benchmarks, OWASP)
Relevant security or cloud certifications (e.g., Security+, CySA+, AWS Certified Security – Specialty, Azure Security Engineer Associate, Google Cloud Professional Cloud Security Engineer)
Benefits
Goldman Sachs is a multinational financial services firm providing securities, investment banking, and management services.
Glassdoor
3.8
Founded in 1869
New York, New York, USA
10001+ employees
https://www.goldmansachs.com
Goldman Sachs is a multinational financial services firm providing securities, investment banking, and management services.
