Engineering Division – Dallas - Associate, Security Engineering - 10431284

Goldman Sachs•Dallas, TX

13d•Onsite

About The Position

This role involves leading and supporting the implementation of static and dynamic analysis, as well as security awareness initiatives across all stages of the secure software development lifecycle (S-SDLC). The position drives the integration and adoption of embedded application security controls within the Software Development Life Cycle (SDLC) and interfaces with Business Units (BU) to help remediate issues identified by automated tools. The Associate will develop, enhance, support, and maintain the Firm’s secure software development lifecycle (S-SDLC) solutions in support of its global businesses. This includes designing and implementing high-quality, scalable, and thoughtful technology solutions leveraging both internal and open-source services. The role also assists in requirements gathering, user story refinement, development, testing (unit, integration and regression), User Acceptance Testing (UAT), and deployment. Collaboration with internal teams to develop solution designs and identification of new external technologies for transforming financial businesses and internal platforms are key aspects. The position requires working in all phases of the Secure Software Development Lifecycle (SDLC) to meet internal and regulatory requirements, and designing, implementing, and maintaining robust testing suites to enable secure, complete, and scalable solutions across business lines.

Requirements

Master’s degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and one (1) year of experience in the job offered or a related role OR Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Information Security, or a related field and three (3) years of experience in the job offered or a related role.
Prior experience must include one (1) year (with a Master’s degree) or three (3) years (with a Bachelor’s degree) with: application and infrastructure architecture and security (on premise and Cloud);
application security best practices including OWASP and CWE;
application security vulnerabilities and controls to remediate risks;
assessing and mitigating software security threat vectors, attack surface analysis, source code reviews, or vulnerability assessments;
working in shift left environment to help embed security in Design phase to implement security controls within system architecture;
conducting infrastructure or application security risk assessments.

Responsibilities

Lead and support the implementation of static and dynamic analysis, as well as security awareness initiatives across all stages of the secure software development lifecycle (S-SDLC).
Drive the integration and adoption of embedded application security controls within Software Development Life Cycle (SDLC).
Interface with Business Units (BU) to help remediate issues identified by automated tools.
Develop, enhance, support and maintain the Firm’s secure software development lifecycle (S-SDLC) solutions in support of its global businesses.
Design and implement high-quality, scalable and thoughtful technology solutions leveraging both internal and open-source services.
Assist in requirements gathering, user story refinement, development, testing (unit, integration and regression), User Acceptance Testing (UAT) and deployment.
Work with internal teams to help develop solution designs.
Identify new external technologies that can be used to transform our financial businesses and internal platforms in innovative and disruptive ways.
Work in all phases of the Secure Software Development Lifecycle (SDLC) to meet internal and regulatory requirements.
Design, implement and maintain robust testing suites to enable secure, complete, and scalable solutions across our business lines.