SoFi

Unify and scale penetration testing and red team functions into an AI-augmented program, lead complex engagements, and advise engineering and risk partners. | Requires 8+ years of hands-on offensive security experience, 2+ years of leadership in a regulated industry, and expertise in AI-led security, cloud, web, and network attack surfaces. | Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: SoFi's Cyber Defense organization is looking for an Offensive Security Lead to mature and grow our Penetration Testing and Red Team functions. This is a hands-on leadership role for someone who has spent years both doing the work and building the program around it — someone equally comfortable running a red team engagement against a critical banking platform and designing the operating model that lets a small team of offensive operators keep pace with a fast-growing fintech. A defining part of this role is modernizing how the team scales. We're looking for a leader who has already built and implemented AI-assisted penetration testing and red teaming programs — using AI tooling to accelerate reconnaissance, exploit development, attack-path analysis, and reporting — and who can bring that experience to bear on the program. You'll own the strategy, staffing, tooling, and execution quality of both disciplines, report into Cyber Defense leadership, and act as a trusted advisor to engineering, product, and risk partners across the company. What You’ll Do: Lead and unify Penetration Testing and Red Team into a single, cohesive Offensive Security function — shared standards, shared tradecraft, shared reporting, distinct missions. Set and execute the offensive security roadmap, aligning testing scope and cadence to SoFi's risk profile, regulatory obligations, and the pace of product and platform change in the company. Build and scale AI-augmented offensive security capabilities — design and implement tooling and workflows (AI-assisted recon, vulnerability triage, exploit chaining, purple-team simulation, report generation) that increase the team's coverage and throughput without sacrificing depth or tradecraft. Personally lead and contribute to engagements where needed — network, application, cloud, and AI pentests; adversary emulation and full-scope red team operations — staying technically credible with the team you lead. Manage and develop the team: hire, coach, mentor, and grow a mix of penetration testers and red team operators; build clear career paths between the two disciplines and into leadership or other disciplines. Own program metrics and maturity: define KPIs for coverage, finding severity and remediation velocity, engagement quality, and program ROI; report progress to senior leadership and risk committees. Partner cross-functionally with Vulnerability Management, SOC/Incident Response, Application Security, and engineering teams to ensure offensive findings drive real remediation and inform detection engineering. Manage external partnerships — third-party pentest and red team tooling and/or execution vendors, — including scoping, quality oversight, and budget. Represent Offensive Security in audits, regulatory exams, and executive briefings, translating technical risk into business risk clearly and credibly. What You’ll Need: 8+ years in offensive security, with demonstrated hands-on experience in both penetration testing and red team/adversary emulation — not just one discipline. 2+ years directly managing or leading offensive security teams, ideally within a regulated industry (financial services, fintech, healthcare, or similar). Proven experience designing and implementing AI-led or AI-assisted offensive security programs — you can speak concretely to what you built, what tooling/models you used, what scaled and what didn't, and how it changed team output. Deep technical fluency across network, web/application, cloud (AWS/GCP/Azure), and mobile attack surfaces, plus familiarity with adversary emulation frameworks (e.g., MITRE ATT&CK) and C2 tooling. Track record of building programs from the ground up or maturing existing ones — process, tooling, metrics, and team structure, not just individual engagements. Strong written and verbal communication skills; comfort presenting findings and program strategy to engineering leaders, risk teams, and executives. Experience operating in a highly regulated environment and working with auditors/examiners is a strong plus. Relevant certifications (OSCP, OSCE, OSEP, GPEN, GXPN, CRTO, or equivalent demonstrated experience) preferred but not required in lieu of strong hands-on track record. Compensation and Benefits The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location. To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page! SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law. The Company hires the best qualified candidate for the job, without regard to protected characteristics. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. New York applicants: Notice of Employee Rights SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email accommodations@sofi.com. We are unable to accommodate remote work from Hawaii, Alaska or Puerto Rico at this time. Internal Employees If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.

Lead development and testing of system components, shape technical architecture, mentor engineers, and drive digital transformation. | At least seven years experience with modern tech stacks, microservices, and cloud development environments. | Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. Social Finance, LLC seeks Senior Software Engineer in San Francisco, CA: Job Duties: Lead the development and testing of system components/services, code and design reviews. Participate in shaping the technical architecture of the product. Help translate product requirements into user stories and technical solutions. Delivery highly available and scalable services in a production environment. Mentor other engineers, support the technical culture, and help grow the team. Generate ideas for new initiatives and technologies. Communicate with project leads, production managers and other software developers. Part-time telecommuting is an option. Hybrid work from Social Finance offices in San Francisco, CA. Requirements: Seven (7) years of experience in the job offered or in a related occupation. Special Skill Requirements: 48 months of experience in: programming experience utilizing a modern technology stack using ReAct, graphQL, springboot, Airflow, Zookeeper, Terraform, Kafka and Flink. 48 months of experience in: Java, Kotlin, Python and JavaScript in-memory data structures, SQL and NoSQL database design. Service-Oriented Architecture (SOA) or microservice based application environment using Docker, Kubernetes and AWS Fargate. AI terminologies, including Large Language Models (LLM) usage in agent development using AWS Bedrocks and Spring AI. modern CI-CD and collaborative coding environments, including using Git for version control, code reviews, and terraform, AWS CDK for continuous development sophisticated testing systems for distributed systems at scale using JUnit. Operational excellence practices and using monitoring tools, including DataDog or AWS Cloudwatch. driving digital transformation initiatives through large-scale service migrations and tech stack modernization using feature gating mechanisms like Optimizely. Any suitable combination of education, training and/or experience is acceptable. Part-time telecommuting is an option. Hybrid work from Social Finance offices in San Francisco, CA. Salary: $221,187.00 - $243,305.00 per year. Submit resume with references using the apply button on this posting or by email to: Req.# 1014.513.7 at: ATTN: HR, jobadverts@sofi.org. #LI-DNI Compensation and Benefits The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location. To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page! SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law. The Company hires the best qualified candidate for the job, without regard to protected characteristics. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. New York applicants: Notice of Employee Rights SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email accommodations@sofi.com. Due to insurance coverage issues, we are unable to accommodate remote work from Hawaii or Alaska at this time. Internal Employees If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.

Design and build backend services for digital asset custody platform focusing on security and reliability. | 7+ years backend experience with distributed systems, cloud-native architectures, and strong API knowledge. | Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role We are looking for a Staff Backend Engineer to help build the next generation of SoFi's digital asset custody platform. This engineer will design and develop the core services that power secure custody, blockchain transaction processing, wallet infrastructure, and institutional digital asset products. This role sits at the center of crypto infrastructure, working closely with Security, Platform Engineering, Product, Treasury, and Operations to build highly available systems responsible for protecting customer assets. The ideal candidate enjoys solving distributed systems problems, designing resilient APIs, and building financial infrastructure where security and reliability are first-class requirements. What you’ll do: - Design and build backend services supporting SoFi's digital asset custody platform - Develop secure transaction orchestration services for deposits, withdrawals, transfers, staking, and treasury operations - Build integrations with custody providers, blockchain infrastructure, and institutional settlement networks - Design APIs supporting retail and institutional crypto products - Develop services supporting wallet lifecycle management and blockchain interactions - Improve platform resiliency through redundancy, disaster recovery, observability, and automated recovery mechanisms - Optimize transaction throughput while maintaining strict security controls - Build scalable event-driven architectures supporting blockchain state changes and transaction processing - Partner closely with Security Engineering to implement cryptographic controls and authorization workflows - Collaborate with Product and Infrastructure teams to deliver new digital asset capabilities What you’ll need: - 7+ years of backend software engineering experience - Strong experience with distributed systems and cloud-native architectures - Experience building highly available production services - Strong understanding of REST APIs, asynchronous messaging, and event-driven systems - Experience with AWS or comparable cloud platforms - Experience with PostgreSQL, Redis, Kafka, or similar technologies - Strong understanding of CI/CD and modern software development practices - Excellent debugging and production incident response skills Nice to have: - Experience working with digital assets or blockchain infrastructure - Experience integrating with custody platforms such as Fireblocks, BitGo, or Anchorage - Experience building financial services infrastructure - Familiarity with blockchain transaction lifecycle and wallet architecture - Experience designing secure approval workflows - Understanding of distributed consensus and cryptographic systems - Experience supporting institutional financial platforms Compensation And Benefits The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location. To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page! SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law. The Company hires the best qualified candidate for the job, without regard to protected characteristics. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. New York applicants: Notice of Employee Rights SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email accommodations@sofi.com. Due to insurance coverage issues, we are unable to accommodate remote work from Hawaii or Alaska at this time. Internal Employees If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.

Design and build backend services for a digital asset custody platform focusing on security, reliability, and blockchain integration. | 7+ years backend engineering experience with strong distributed systems, cloud-native architecture, and API design skills. | Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we're changing the way people think about and interact with personal finance. We're a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we're at the forefront. We're proud to come to work every day knowing that what we do has a direct impact on people's lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role We are looking for a Staff Backend Engineer to help build the next generation of SoFi's digital asset custody platform. This engineer will design and develop the core services that power secure custody, blockchain transaction processing, wallet infrastructure, and institutional digital asset products. This role sits at the center of crypto infrastructure, working closely with Security, Platform Engineering, Product, Treasury, and Operations to build highly available systems responsible for protecting customer assets. The ideal candidate enjoys solving distributed systems problems, designing resilient APIs, and building financial infrastructure where security and reliability are first-class requirements. What you'll do: - Design and build backend services supporting SoFi's digital asset custody platform - Develop secure transaction orchestration services for deposits, withdrawals, transfers, staking, and treasury operations - Build integrations with custody providers, blockchain infrastructure, and institutional settlement networks - Design APIs supporting retail and institutional crypto products - Develop services supporting wallet lifecycle management and blockchain interactions - Improve platform resiliency through redundancy, disaster recovery, observability, and automated recovery mechanisms - Optimize transaction throughput while maintaining strict security controls - Build scalable event-driven architectures supporting blockchain state changes and transaction processing - Partner closely with Security Engineering to implement cryptographic controls and authorization workflows - Collaborate with Product and Infrastructure teams to deliver new digital asset capabilities What you'll need: - 7+ years of backend software engineering experience - Strong experience with distributed systems and cloud-native architectures - Experience building highly available production services - Strong understanding of REST APIs, asynchronous messaging, and event-driven systems - Experience with AWS or comparable cloud platforms - Experience with PostgreSQL, Redis, Kafka, or similar technologies - Strong understanding of CI/CD and modern software development practices - Excellent debugging and production incident response skills Nice to have: - Experience working with digital assets or blockchain infrastructure - Experience integrating with custody platforms such as Fireblocks, BitGo, or Anchorage - Experience building financial services infrastructure - Familiarity with blockchain transaction lifecycle and wallet architecture - Experience designing secure approval workflows - Understanding of distributed consensus and cryptographic systems - Experience supporting institutional financial platforms Compensation and Benefits The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate's experience, skills, and location. To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page! Pay range: $153,600.00 - $264,000.00 Payment frequency: Annual This role is also eligible for a bonus, long term incentives and competitive benefits. More information about our employee benefits can be found in the link above. SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law. The Company hires the best qualified candidate for the job, without regard to protected characteristics. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. New York applicants: Notice of Employee Rights SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email accommodations@sofi.com. We are unable to accommodate remote work from Hawaii, Alaska or Puerto Rico at this time. Internal Employees If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles. Skills: Amazon Web Services (AWS), Application Programming Interface (API), Blockchain, Cloud Architecture, Cloud Computing, Compensation and Benefits, Continuous Deployment/Delivery, Continuous Integration, Cryptography, Debugging Skills, Disaster Recovery, Distributed Computing, Employee Benefits, Engineering, Financial Operations, Financial Services, High Availability, Incident Response, Mobile Technology, Personal Finance, PostgreSQL, Problem Solving Skills, REST (Representational State Transfer), Redis, Retail, Scalable System Development, Security Infrastructure, Software Development, Software Engineering, Transaction Processing/Management undefined: Sofi