Vice President, Security Engineering

4w1 month ago

Goldman Sachs

Dallas, US · Full-time · $180,000 – $250,000

About this role

Goldman Sachs is seeking a Vice President, Security Engineering to join our team in Dallas, Texas. In this role, you will perform Application Security Assessments including code review, penetration testing, design review, and threat modeling, and communicate results to application engineers.

Your day-to-day work involves reviewing application security architecture, policies, and standards definitions, and documenting these elements. You will identify vulnerabilities in software applications and design processes to reduce security risks, and actively research new cloud services to help the Firm leverage the Cloud securely.

You will collaborate with stakeholders to understand the design architecture of software components, analyze security threats and risks, and determine exploit vectors and paths. You will write and socialize test cases to verify assumptions from threat analysis, and document issues with detailed recommendations for remediation.

This role offers the opportunity to enable a world-class cyber defense program by working closely with technical, incident management, and forensic personnel to understand cyber threat actor activity. You will also provide security consulting across the Firm and stay current with new technologies to assist engineers in assessing risk.

Requirements

Master’s degree in Cybersecurity, Computer Science, Computer Engineering, or related field plus 3 years of experience in Security Engineering, OR Bachelor’s degree plus 5 years of experience
Experience reviewing security controls and how they apply to different designs and systems to identify security gaps
Ability to highlight and articulate risk to developers or engineers in understandable language
Experience engaging with application teams to design and build security elements of architecture
Experience performing application vulnerability assessment and penetration testing of web applications
Experience performing code review of web application programming languages such as Java
Experience performing assessments of technologies leveraging common web stack technologies such as Java
Experience performing architecture review of web applications

Responsibilities

Perform Application Security Assessments (Code Review, Penetration Test, Design Review, Threat modelling) and communicate results to application engineers
Review Application Security architecture, policies, standards definitions, and carry out documentation
Identify vulnerabilities in software applications and software designing processes to reduce security risks
Actively research new cloud services and identify ways to leverage the Cloud in a secure manner
Work with stakeholders to understand design architecture of software components to analyze security threats and risks
Perform security threat analysis to determine exploit vectors and paths for software components
Write and socialize test cases to verify assumptions from threat analysis
Document issues with detailed recommendations and advise component owners on secure remediation