Engineering Division - Tech Risk Advisory - Associate - Hyderabad

JOB DESCRIPTION

Conduct comprehensive cloud security assessments, evaluating designs, configurations, and implementations across various cloud service

providers (CSPs).

Identify and analyze potential security risks, vulnerabilities, and misconfigurations within cloud environments and applications.

Perform software architecture design reviews for cloud deployments.

Develop secure architecture design patterns, particularly for cloud-native applications.

Develop, evaluate, and document security measures, controls, and guardrails to protect data, applications, APIs, and infrastructure in the cloud.

Collaborate with engineering and development teams to embed security best practices throughout the software development lifecycle (SDLC) and

CI/CD pipelines for cloud-native applications.

Provide technical advisory services on cloud security to internal stakeholders, ensuring alignment with firm-wide security policies and industry

best practices.

Develop and maintain scripts and automated solutions to streamline security processes, vulnerability identification, and compliance checks within

cloud environments.

Stay updated on emerging cloud security threats, technologies, and regulatory requirements.

Contribute to incident response and remediation efforts related to cloud security events as required.

Qualifications

Development / Scripting / Coding Skills: Demonstrated proficiency and hands-on experience in scripting and coding, particularly with

languages such as Python, PowerShell, or Bash, for automation, data analysis, or security tooling.

Baseline Security Knowledge: Fundamental understanding of cybersecurity principles, security controls, and common security domains (e.g.,

network security, identity and access management, data protection, vulnerability management).

Cloud Fundamentals: A foundational grasp of cloud computing concepts and architectures, with basic familiarity and understanding of at least

one major Cloud Service Provider (e.g., Amazon Web Services, Microsoft Azure, Google Cloud Platform, Oracle Cloud). Prior project experience

in cloud and conceptual understanding is essential.

Bachelor's degree in Computer Science, Information Security, or a related technical field, or equivalent practical experience.

Strong analytical and problem-solving skills with an investigative mindset.

Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences.

Preferred Qualifications

Prior experience in a security-focused role within financial services or other highly regulated industries.

Familiarity with industry security frameworks and standards (e.g., NIST, ISO 27001, CIS Benchmarks, OWASP).

Relevant security or cloud certifications (e.g., Security+, CySA+, AWS Certified Security – Specialty, Azure Security Engineer Associate, Google

Cloud Professional Cloud Security Engineer).

About Goldman Sachs

At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.

We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.

We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html

© The Goldman Sachs Group, Inc., 2023. All rights reserved.

Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.