Posted 11 days ago
No clicks
**Asset & Wealth Management Associate Security Engineer - New York** Serve as **Associate Security Engineer** within Goldman Sachs' Asset & Wealth Management division in New York. Drive security by design through security assessments and tool enhancements. **Key Responsibilities:** - Perform security assessments, risk analysis, and vulnerability management across the SDLC (Security by Design) - Collaborate with global teams on tech initiatives to improve detection and security posture - Review system architecture, identify gaps, and ensure alignment with firm policies, standards, and regulations - Conduct penetration testing, code reviews, and third-party integrations assessments - Communicate risks and findings to stakeholders and support remediation efforts **Required Skills & Experience:** - Master's degree in Cyber Security, Computer Science, or related field with 1 year of experience, OR - Bachelor's degree with 3 years of experience in Security Engineering - Proven experience working with both application and infrastructure architecture and security (on-prem and Cloud) - Strong knowledge of application security best practices (OWASP, CWE) - Familiarity with vulnerability assessment, threat modeling, and attack surface analysis - Experience working in a shift-left environment and embedding security in the design phase **Seniority Level:** Early/Mid-career (Associate) **Domain:** Finance (Asset & Wealth Management) **Technologies & Tools:** Application security, vulnerability assessment, penetration testing, OWASP, CWE, SDLC, Cloud security (on-prem and Cloud)
- Compensation
- $132,000 – $184,400 USD
- City
- New York City
- Country
- United States
Currency: $ (USD)
Full Job Description
Job Duties: Associate, Security Engineering with Goldman Sachs & Co. LLC in New York, New York. Perform security assessments of business-initiated projects to drive adoption of application and infrastructure security controls and best practices, ensuring security and privacy by design. Collaborate with technical and global teams on major technology initiatives to ensure security is embedded early and to enhance detection capabilities through improved tools, tuning, and data sources. Review system architectures, such as client/server, cloud, web, mobile, and security controls to identify gaps and ensure alignment with firm policies, standards, and regulatory requirements. Conduct application security risk assessments across the SDLC, including vulnerability assessments and penetration testing of internal and external applications in coordination with vulnerability management teams. Perform secure code reviews for applications using languages such as Java, React, and Python to identify vulnerabilities and strengthen security posture. Evaluate third-party system integrations and work with infrastructure teams to implement and validate security controls across platforms. Communicate technical findings, risks, and security gaps clearly to stakeholders, developers, and engineers through reporting and presentations to support issue tracking and remediation.
Job Requirements: Masters degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and one (1) year of experience in the job offered or a related Security Engineering role OR Bachelors degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and three (3) years of experience in the job offered or a related Security Engineering role. Prior work experience must include one (1) year of experience (with a Masters degree) or three (3) years of experience (with a Bachelors degree) with each of the following: working with both application and infrastructure architecture and security on premise and Cloud; working with application security best practices including OWASP and CWE; working with application security vulnerabilities and controls to remediate risks; assessing and mitigating software security threat vectors, threat modeling, attack surface analysis, security design reviews, source code reviews, penetration testing or vulnerability assessments; working in shift left environment to help embed security in Design phase to implement security controls within system architecture; and conducting infrastructure or application security risk assessments.
Salary Range: Annual base salary for this New York, New York - based position is $132,000 - $184,400.
The Goldman Sachs Group, Inc., 2026. All rights reserved. Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veteran status, disability, or any other characteristic protected by applicable law.
