Engineering Division – Dallas - Vice President, Security Engineering - 10427704
About The Position
Goldman Sachs & Co. LLC is seeking a Vice President, Security Engineering in Dallas, Texas. This role involves performing comprehensive application security assessments, including code reviews, penetration testing, design reviews, and threat modeling. The position requires communicating assessment results to application engineers, reviewing and documenting application security architecture, policies, and standards. A key responsibility is identifying vulnerabilities in software applications and design processes to mitigate security risks. The role also involves researching new cloud services for secure Firm leverage, analyzing security threats and risks by understanding software component architectures, and performing security threat analysis to identify exploit vectors. Additionally, the position requires writing and socializing test cases, documenting issues with remediation recommendations, and advising component owners on secure implementation. Staying current with new technologies, assisting engineers with risk assessment, and contributing to a world-class cyber defense program by collaborating with technical, incident management, and forensic personnel are also crucial. The role provides security consulting within the Firm as needed.
Requirements
- Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and three (3) years of experience in the job offered or a related Security Engineering role OR Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and five (5) years of experience in the job offered or a related Security Engineering role.
- Prior work experience must include three (3) years of experience (with a Master’s degree) or five (5) years of experience (with a Bachelor’s degree) with reviewing security controls and how they apply to different designs and systems in order to identify security gaps
- Highlighting and articulating risk to developers or engineers in an understandable language
- Performing application vulnerability assessment and penetration testing of web applications
- Performing code review of web application programming languages such as Java
- Performing assessments of technologies leveraging common web stack technologies such as Java
- Performing architecture review of web applications
Responsibilities
- Perform Application Security Assessments (Code Review, Penetration Test, Design Review, Threat modelling)
- Communicate assessment results to respective application engineers
- Review Application Securing architecture, policies, standards definitions, and carry out documentation
- Identify vulnerabilities in software applications and software designing processes to reduce security risks
- Research new cloud services and identify ways in which the Firm can leverage the Cloud in a secure manner
- Work with stakeholders to understand the design architecture of software components to analyze security threats and risks
- Perform security threat analysis to determine the exploit vectors and paths for software components
- Write and socialize test cases to verify assumptions from threat analysis
- Document issues along with detailed recommendations for how to address issues
- Share issues and recommendations with component owners and advise on how they can implement secure remediation
- Stay up to date with new technologies and assist engineers in assessing risk
- Enable a world-class cyber defense program by working closely with other technical, incident management, and forensic personnel to develop a fuller understanding of activity of cyber threat actors
- Provide security consulting within the Firm as needed
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
