TECH4519285 – Vice President

Vice President with Goldman Sachs & Co. LLC in New York, NY.

Work Schedule: 40 hours per week (9:00 a.m. to 6:00 p.m.)

Duties: Vice President with Goldman Sachs & Co. LLC in New York, NY. Multiple Positions Available. Responsible for Technology Risk Advisory for five (5) Business Units across the firm: Work closely with Business Units on new, emerging and existing initiatives, and consult on cyber-related risks; Assist Business Units to design secure systems by identifying applicable controls and recommending approved design patterns; Lead a team that is responsible for assessing cyber related risks across Business Units, including Design Reviews, Manual Code Reviews, Automated scanning and Penetration Testing; and Partner with Business Units to understand their risk portfolio and help create strategy that reduce risk. Act as the Firm’s Lead Penetration Tester: Responsible for the most complex engagements (e.g. launch of new business) and deliver impactful results to Business Units; Ensure that the firm’s Penetration Testing methodology is up to date and relevant to applicable laws, regulations, standards and techniques; Enforce quality assurance across all Penetration Tests; and Act as the technical security lead for the firm’s Bug Bounty program.

Job Requirements: Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Computer Information Systems, Information Technology, Information Security, Network Security, or a related field and seven (7) years of experience in the job offered or in a related role or a Master’s degree (U.S. or foreign equivalent) in Computer Science, Computer Information Systems, Information Technology, Information Security, Network Security, or a related field and five (5) years of experience in the job offered or in a related role. Must have 5 years of experience with: Crafting custom proof of concept application exploits using testing tools/frameworks or scripting exploits in Java, Python, Perl, JavaScript, and Shell scripting (Bash); All security domains (including: Authentication, Authorization Technologies, Networking, Input Validation Frameworks, Data Integrity and Confidentiality); Identifying vulnerabilities via Design and Architecture Reviews, Code Reviews, Penetration Tests; Understanding highly technical topics and findings, distilling to content that is easily consumable and understandable to business stakeholders, and advising Business Units on risk mitigation strategy; Network, application and operating system (including MacOS, Debian, Redhat, Ubuntu, and Windows) security risks; Application vulnerability assessment and penetration testing of web, thick-client, and mobile applications; Providing technical solutions to solve source-code issues, including custom Regular Expression Writing, Preparing Validation Patterns and code-development using Java, Python, Perl, JavaScript, and Shell scripting; and Common web stack technologies (including HTTP, HTML5, AJAX, and REST) and platforms (including DropWizard, AngularJS, Tomcat, .Net, Sybase, MS SQL, MongoDB, Burp, Nmap, Nicto, Nessus, and Accunetix). Must have 3 years of experience with: Examining application state machine to validate assumptions and identify vulnerabilities. Must have 2 years of experience with: Technology stacks, including: PingFederate, Bouncy Castle, Snowflake, NPM, Node.JS, Apache, Tomcat, Apache, AES Database, MySQL, MSSQL, MongoDB, Adobe Experience Manager, and KONA Web Application.

The Goldman Sachs Group, Inc. is a leading global investment banking, securities and investment management firm that provides a wide range of financial services to a substantial and diversified client base that includes corporations, financial institutions, governments and individuals. Founded in 1869, the firm is headquartered in New York and maintains offices in all major financial centers around the world.

© The Goldman Sachs Group, Inc., 2019. All rights reserved Goldman Sachs is an equal employment/affirmative action employer Female/Minority/Disability/Vet.