Platform Solutions-Richardson- Associate, Security Engineering- 10446228

Job Duties: Associate, Security Engineering with Goldman Sachs Bank USA in Richardson, Texas. Responsible for performing security assessments of business-initiated projects helping to drive adoption of application and infrastructure security controls and best practices. Ensure security and privacy by design, including design process improvements, assessment of controls, data models, cryptographic implementation, and compliance and regulatory needs. Advise on leading edge engineering to protect the firm’s network from security risks related to client/server architectures, Cloud architectures, web services and mobile applications. Conduct risk reviews of 3rd party system integrations against firm policies and standards. Collaborate with the global team to continually operate and improve a world-class cyber program by providing input into the uplift of sensory tools, detection tuning, and access to data sources to increase detection effectiveness. Review security controls and how they apply to different designs and systems in order to identify security gaps. Highlight and articulate risk to developers or engineers.

Job Requirements: Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and one (1) year of experience in the job offered or a related role OR Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and three (3) years of experience in the job offered or a related role. Prior work experience must include one (1) year of experience (with a Master’s degree) or three (3) years of experience (with a Bachelor’s degree) with each of the following: assisting on gathering evidence for compliance & control gap assessments such as SOC1, CCPA, ETC; assisting on analyzing & grading risk in the regulatory framework such as NIST to determine the level of risk associated with GAPs identified; analyzing potential security vulnerabilities on tools or components, such as Windows Servers, Active Directory, Azure or AWS Cloud, and on-premises software and systems; analyzing performance and design for security controls implemented in the hybrid, public or private cloud environment, utilizing various reporting or analytical tools, such as Splunk and MS Excel, or to generate reports; and performing security audits to analyze & mitigate potential security vulnerabilities on tools or components, such as Azure, AWS, and on-premises software and systems.