Engineering Division - Dallas - Vice President, Security Engineering - 10427704

Job Duties: Vice President, Security Engineering with Goldman Sachs & Co. LLC in Dallas, Texas, Perform Application Security Assessments (Code Review, Penetration Test, Design Review, Threat modelling) and communicate the results to the respective application engineers. Review Application Securing architecture, policies, standards definitions, and carry out documentation of the above. Identify vulnerabilities in software applications and software designing processes to reduce security risks. Actively research new cloud services and identify ways in which the Firm can leverage the Cloud in a secure manner. Work with stakeholders to understand the design architecture of software components to analyze security threats and risks. Perform security threat analysis to determine the exploit vectors and paths for software components. Write and socialize test cases to verify assumptions from threat analysis. Document issues along with detailed recommendations for how to address issues. Share issues

and recommendations with component owners and advise on how they can implement secure remediation. Stay up to date with new technologies and assist engineers in assessing risk. Enable a world-class cyber defense program by working closely with other technical, incident management, and forensic personnel to develop a fuller understanding of activity of cyber threat actors. Provide security consulting within the Firm as needed.

Job Requirements: Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and three (3) years of experience in the job offered or a related Security Engineering role OR Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering or a related field and five (5) years of experience in the job offered or a related Security Engineering role. Prior work experience must include three (3) years of experience (with a Master’s degree) or five (5) years of experience (with a Bachelor’s degree) with each of the following: reviewing security controls and how they apply to different designs and systems in order to identify security gaps; highlighting and articulating risk to developers or engineers in an understandable language; performing application vulnerability assessment and penetration testing of web applications; performing code review of web application programming languages such as Java; performing assessments of technologies leveraging common web stack technologies such as Java; and performing architecture review of web applications.