About The Role

What We Do

At Goldman Sachs, our Engineers don’t just make things – we make things possible. Change the world by connecting people and capital with ideas. Solve the most challenging and pressing engineering problems for our clients. Join our engineering teams that build massively scalable software and systems, architect low latency infrastructure solutions, proactively guard against cyber threats, and leverage machine learning alongside financial engineering to continuously turn data into action. Create new businesses, transform finance, and explore a world of opportunity at the speed of markets.

Key Responsibilities

Lead and evolve the firm's Secure Software Development Lifecycle (Secure SDLC) strategy across global engineering teams.
Drive adoption of application security controls throughout the software development lifecycle, including static and dynamic security testing.
Partner with engineering teams to embed security-by-design principles into SDLC and CI/CD processes.
Lead application security reviews, threat modelling activities, and security testing programmes.
Oversee and enhance security testing capabilities, including SAST, DAST and emerging AI-enabled security testing solutions.
Assess application security risks and help engineering teams prioritise remediation efforts.
Collaborate with engineering, product and technology stakeholders to improve security controls and developer security practices.
Evaluate emerging technologies and AI-driven security capabilities to strengthen Secure SDLC services.
Mentor and support security engineers while promoting a strong application security culture across the firm.

Basic Qualifications

7+ years of experience in Application Security, Secure SDLC, DevSecOps or Product Security.
Strong understanding of Secure SDLC principles and software development practices.
Hands-on experience with Application Security and security testing methodologies.
Experience with SAST, DAST and application security tooling.
Experience integrating security controls into CI/CD pipelines and modern engineering workflows.
Strong understanding of threat modelling, vulnerability management and application risk assessment.
Excellent communication and stakeholder management skills.

Preferred Qualifications

Experience leading or driving Secure SDLC initiatives in large-scale engineering environments.
Knowledge of industry frameworks and standards such as OWASP Top 10, CWE and NIST.
Familiarity with AI-enabled security tooling and AI security concepts.
Experience with cloud-native application security and modern software architectures.
Background in Financial Services, FinTech or another highly regulated industry.
Relevant security certifications such as CISSP, CSSLP, GIAC or cloud security certifications.

ABOUT GOLDMAN SACHS

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.