Goldman Sachs & Co. Technology - Technology Risk - Advisory - Vulnerability Management - Associate - New York in New York, New York



Our team of engineers builds solutions to the most complex problems. We develop cutting-edge systems and processes that form the core of our key business and enable transactions to move in milliseconds. We provide real-time access to critical deal information and crunch billions of data points each day to inform firm-wide market insights and strategies. Team members have the opportunity to work at the forefront of technology innovation alongside industry leaders and make significant contributions to the field.


We are looking for an, highly self-motivated candidates for our global Vulnerability Management team within Technology Risk Advisory to be based in New York/London/Warsaw. The successful candidate will ideally possess:

  • Strong technical skills particularly in one, or more areas, of infrastructure or platform security

  • Experience working within a vulnerability management program in a complex and diverse global multi-technology environment

  • Experience with industry standard patch management and vulnerability management tools and techniques

  • The ability to clearly articulate technical vulnerabilities and associated risks to a diverse audience

  • The motivation to and contribute support continual improvement of the firm’s global vulnerability program


Goldman Sachs Technology Risk is leading threat, risk analysis and data science initiatives that are helping to protect the firm and our clients from information and cyber security risks. Our team equips the firm with the knowledge and tools to measure risk, identify and mitigate threats and protect against unauthorized disclosure of confidential information for our clients, internal business functions, and our extended supply chain.

Risk Advisory delivers best in class advisory support and technology solutions across the information security risk domain including scalable uplifts of common core security solutions for use across Goldman Sachs. Prevents the misuse, unauthorized disclosure, or loss of firm data across e-mail, file transfer, and the Internet. Ensures business continuity and technology resilience by safeguarding Goldman Sachs from major operational disruptions through preventative measures including business planning, capability design, and the testing of mitigants.


  • Execute and support the firm's global vulnerability management program as part of the global Advisory team within Technology Risk

  • Help drive vulnerability discovery requirements across the firm's technology environment using various automated and manual discovery tools and vendors

  • Work with vulnerability data from various sources to effectively identify and analyze the firm's security posture in relation to technical vulnerabilities to drive risk reduction

  • Execution of processes and procedures in support of the vulnerability management lifecycle from identification, to reporting, and risk treatment

  • Collaborate with the firm's engineering teams to assess reported vulnerability applicability and impact to the firm to enable appropriate vulnerability management

  • Keep up to date with industry patching and vulnerability trends



Basic Qualifications

  • Knowledge of vulnerability discovery and remediation techniques, processes and methodologies

  • Knowledge and experience in the areas of security assessment, vulnerability scanning and risk based threat analysis

  • Strong understanding of one or more of application, infrastructure, or networking concepts and protocols to support the Vulnerability Management program

  • Experience using industry standard vulnerability assessment tools (such as nmap, nesssus, Qualys) and interpreting, analyzing and assessing their data output

  • Experience executing processes, procedures and automation to support a Vulnerability Management program

Preferred Qualifications

  • Bachelor's degree or higher preferred.

  • Clear communication skills, both verbal and in writing.

  • Excellent organization and interpersonal skills.

  • Strong analytic and problem solving ability

  • Experience working as part of a global team.

  • A passion for, and deep understanding of, the technical aspects of information security with particular focus on vulnerability and threat management


The Goldman Sachs Group, Inc. is a leading global investment banking, securities and investment management firm that provides a wide range of financial services to a substantial and diversified client base that includes corporations, financial institutions, governments and individuals. Founded in 1869, the firm is headquartered in New York and maintains offices in all major financial centers around the world.

© The Goldman Sachs Group, Inc., 2017. All rights reservedGoldman Sachs is an equal employment/affirmative action employer Female/Minority/Disability/Vet.

Location(s)US-NY-New York

Job ID2017-39637

Schedule TypeFull Time





Business UnitTechnology Risk

Employment TypeEmployee