SoFi

Offensive Security Lead

SoFi · CA - San Francisco; WA - Seattle; NY - New York City; UT - Cottonwood Heights; TX - Frisco; MT - Helena

Posted 13 days ago

or apply directly on SoFi's site. We never take the application ourselves.

Is this posting real?

This role has been open
13 days
SoFi's roles stay open a median of 33 days
Reposted
No
Salary listed
No
7% of SoFi's roles list one
Ghost-job risk at SoFi
high
23 stale, 5 reposted of 61 open
Hiring momentum
122 roles opened in the last 90 days
↑ up vs. the prior 90 days
Last confirmed on the employer's board
2026-09-17

Measured from postings appearing on and disappearing from SoFi's own greenhouse board since 2026-08-03. Full hiring picture for SoFi.

About this role

As the Offensive Security Lead at SoFi, you will oversee and enhance the Penetration Testing and Red Team functions, focusing on integrating these disciplines into a cohesive offensive security strategy. Your role involves leading hands-on engagements, implementing AI-assisted security programs, managing a team of security professionals, and ensuring that offensive findings contribute to real remediation efforts across the organization.

Our read on this posting2.8out of 5
benefits
1/5
freshness
4/5
career value
4/5
role clarity
5/5
pay transparency
0/5

Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of SoFi as an employer.

What you need

  • 8+ years in offensive security with hands-on experience in penetration testing and red team/adversary emulation
  • 2+ years managing or leading offensive security teams in a regulated industry
  • Experience designing and implementing AI-led or AI-assisted offensive security programs
  • Deep technical fluency across network, web/application, cloud (AWS/GCP/Azure), and mobile attack surfaces
  • Strong written and verbal communication skills
  • Experience operating in a highly regulated environment

Nice to have

  • Experience with adversary emulation frameworks (e.g., MITRE ATT&CK) and C2 tooling
  • Relevant certifications (OSCP, OSCE, OSEP, GPEN, GXPN, CRTO) preferred but not required

Worth weighing

  • No specific salary figures provided, only a base pay range based on experience and location
  • The role requires a mix of hands-on technical skills and leadership, which may be demanding
  • Experience in a regulated environment is emphasized, which may limit flexibility in approach

Summarised from SoFi's posting. Read the full original.

Listed by SoFi on their greenhouse job board, last confirmed open on 2026-09-17. PitchMeAI is not the employer.

More roles at SoFi

All 61 open roles at SoFi