The role is part of the Technology Risk team at Goldman Sachs, which is focused on securing the firm against cyber threats and enhancing application security. The team provides consultative expertise in assessing technology initiatives for risk and collaborates with engineers to design secure products and services. The position emphasizes the importance of secure architecture, particularly for cloud-native applications on AWS. The candidate will also mentor junior team members and leverage AI tools to improve security workflows.

• 6 or more years of experience in technical roles focusing on application security and cloud security.
• Prior experience in performing Threat Modeling or Secure Design Reviews.
• Knowledge of common Application Security vulnerabilities such as OWASP Top 10.
• Familiarity with security standards like OWASP Testing Guide and NIST.
• Experience in application vulnerability assessment and penetration testing.

• Perform software architecture design reviews for on-premise or cloud deployments with a focus on AWS.
• Serve as an Application security liaison for developers and architects.
• Review security assessment reports from penetration testing and code review engagements.
• Conduct Read-out Calls with the business to articulate risk and recommend mitigation strategies.
• Develop secure architecture design patterns for cloud-native applications on AWS.

• Employees at Goldman Sachs are often offered comprehensive benefits, including medical, dental, life and disability coverage, generous vacation and holidays, and robust wellness resources such as EAP counseling, medical advocacy, on-site/virtual health services, and fitness support. Financial perks typically include retirement savings programs, live financial education, education support, and wealth-creation opportunities through equity awards and select investment programs. Many locations also provide family benefits (childcare resources, parental and family leaves, adoption/surrogacy support) and flexible work options like part-time schedules, job sharing, telecommuting, and alternate hours.