Platform Solutions-Richardson- Associate, Security Engineering- 10446228

Experteer Overview In this role you help safeguard Goldman Sachs’ systems by conducting security assessments, guiding the adoption of robust security controls, and ensuring privacy-by-design across projects. You will advise on securing networks, cloud, and client/server architectures while aligning with regulatory requirements. You collaborate with global teams to enhance detection capabilities and close security gaps. Your work centers on communicating risk to engineers and shaping a resilient cyber program. This is an opportunity to impact security at scale in a premier financial services firm. Compensation / Benefits * Perform security assessments of business-initiated projects and promote application and infrastructure security best practices * Ensure privacy-by-design and contribute to design process improvements, controls assessment, and regulatory compliance * Advise on engineering approaches to protect the firm’s network across client/server, cloud, web services, and mobile architectures * Conduct risk reviews of 3rd party system integrations against firm policies and standards * Collaborate with the global team to operate and improve the cyber program, including tool uplift and detection tuning * Review security controls across designs and systems to identify gaps * Highlight and articulate risk to developers and engineers Tasks * Master’s degree in Cyber Security, Computer Science, Computer Engineering or a related field and one year of related experience OR Bachelor’s degree in the same fields and three years of related experience * Experience gathering evidence for compliance and control gap assessments (e.g., SOC1, CCPA) * Experience analyzing risk within regulatory frameworks (e.g., NIST) to determine risk levels for identified gaps * Experience analyzing security vulnerabilities in tools/components (Windows Server, Active Directory, Azure or AWS, on-premises systems) * Experience evaluating security controls in hybrid/public/private cloud environments and generating reports with analysis tools (e.g., Splunk, Excel) * Experience performing security audits to identify and mitigate vulnerabilities in Azure, AWS, and on-premises systems Key requirements *

regulatory * Conduct risk reviews of 3rd party system integrations against firm policies and standards * Collaborate with the global team to operate and improve the cyber program, including tool uplift and detection tuning * Review security controls across designs and systems to identify gaps * Highlight and articulate risk to developers and engineers Tasks * Master’s degree in Cyber Security, Computer Science, Computer Engineering or a related field and one year of related experience OR Bachelor’s degree in the same fields and three years of related experience * Experience gathering evidence for compliance and control gap assessments (e.g., SOC1, CCPA) * Experience analyzing risk within regulatory frameworks (e.g., NIST) to determine risk levels for identified gaps * Experience analyzing security vulnerabilities in tools/components (Windows Server, Active Directory, Azure or AWS, on-premises systems) * Experience evaluating security controls in hybrid/public/private cloud environments and generating reports with analysis tools (e.g., Splunk, Excel) * Experience performing security audits to identify and mitigate vulnerabilities in Azure, AWS, and on-premises systems Key requirements *