Engineering Division - Dallas - Associate, Security Engineering - 10431284

Job Duties: Associate, Security Engineering with Goldman Sachs Services LLC in Dallas, Texas. Lead and support the implementation of static and dynamic analysis, as well as security awareness initiatives across all stages of the secure software development lifecycle (S-SDLC). Drive the integration and adoption of embedded application security controls within Software Development Life Cycle (SDLC). Interface with Business Units (BU) to help remediate issues identified by automated tools. Develop, enhance, support and maintain the Firm's secure software development lifecycle (S-SDLC) solutions in support of its global businesses. Design and implement high-quality, scalable and thoughtful technology solutions leveraging both internal and open-source services. Assist in requirements gathering, user story refinement, development, testing (unit, integration and regression), User Acceptance Testing (UAT) and deployment. Work with internal teams to help develop solution designs. Identify new external technologies that can be used to transform our financial businesses and internal platforms in innovative and disruptive ways. Work in all phases of the Secure Software Development Lifecycle (SDLC) to meet internal and regulatory requirements. Design, implement and maintain robust testing suites to enable secure, complete, and scalable solutions across our business lines.

Job Requirements: Master's degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and one (1) year of experience in the job offered or a related role OR Bachelor's degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and three (3) years of experience in the job offered or a related role. Prior experience must include one (1) year (with a Master's degree) or three (3) years (with a Bachelor's degree) with: application and infrastructure architecture and security (on premise and Cloud); application security best practices including OWASP and CWE; application security vulnerabilities and controls to remediate risks; assessing and mitigating software security threat vectors, attack surface analysis, source code reviews, or vulnerability assessments; working in shift left environment to help embed security in Design phase to implement security controls within system architecture; and conducting infrastructure or application security risk assessments.

The Goldman Sachs Group, Inc., 2026. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.