Employee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The Role:
We are searching for a Fraud Strategist, Ecosystem to own horizontal fraud strategy across the SoFi member journey. This is a sophisticated role for an operator who can reason across the entire product and user lifecycle as a single risk surface. You will design decisioning that travels with the member and recognizes perimeter threats and scam typologies as they cross product seams: onboarding, account creation, funding, money movement (ACH, FedNow, Wire, Zelle, P2P), and high-value product activity. The work requires fluency in device forensics, entity resolution, account takeover (ATO) defense, scam interception, and the rule-engine craft to translate that fluency into production policy. You will lead the cross-product signal layer that lets every product line see a member’s full risk posture, and replace fixed dollar caps with risk-tiered frameworks that price velocity, recency, and counterparty risk.
By joining SoFi, you'll become part of a forward-thinking company that is transforming financial services for the better. We offer the excitement of a rapidly growing startup with the stability of an industry leading leadership team.
What You’ll Do:
The Fraud Strategist, Ecosystem will help SoFi build a unified cross-product fraud defense by:
Owning fraud strategy across the full SoFi product surface, designing decisioning that uses signals from onboarding, login, money movement, and product activity together rather than in isolation.
Leading cross-product perimeter defense covering ATO carryover from compromised credentials, scam interception (authorized push payment, romance, investment, impostor, business email compromise), mule-account detection, and synthetic-identity attacks at funding.
Driving device forensics across product lines: shared device-graph infrastructure, emulator and VM detection, jailbreak and root signals, residential-proxy detection, and entity resolution that links a single bad actor across accounts that look clean in isolation.
Designing risk-tiered money movement decisioning for ACH, FedNow, Wire, Zelle, and P2P flows, replacing fixed dollar caps with dynamic frameworks priced on velocity, recency, counterparty risk, and scam telemetry.
Building the cross-product analytics layer in SQL and Python: shared feature tables, entity-resolution signals, and rule-level attribution that lets every product line see a member’s full risk posture.
Partnering with EPD, Fraud Ops, InfoSec, and product owners to ship strategy changes through the rules engine with clean governance, performance monitoring, and clear escalation when losses deviate from forecast.
What You’ll Need:
BA/BS in Statistics, Information Systems, Mathematics, Data Science, or related fields, or equivalent work experience, and 5–8 years of work experience in Fraud Analytics across multiple product lines.
ATO and Scam Defense: Demonstrated track record reducing account takeover and scam losses across more than one product line. Comfort with the scam taxonomy in detail: authorized push payment, romance, investment, impostor, remote access, business email compromise, and the shared signal between them.
Perimeter Threat Fluency: Operational understanding of how perimeter threats (credential stuffing, MFA bombing, SIM swap, mule-account farming, synthetic identity at funding, first-party intent fraud) manifest at each entry surface of a multi-product fintech.
Device Forensics: Hands-on experience with device fingerprinting, emulator and VM detection, jailbreak and root signals, behavioral biometrics, and entity-level device-graph analysis as a tool for linking accounts across products.
Cross-Product Reasoning: Demonstrated track record building fraud strategy that spans more than one product line, with explicit framing of where signals transfer, where they do not, and how to govern shared risk infrastructure.
Money Movement and Onboarding: Working knowledge of onboarding orchestration, IDV vendor stacks (Socure, Persona, Veriff), rules engines (Oscilar, SAFE, Camunda), and the economics of risk-tiered limits in real-time payments.
Balance Friction and Growth: Deep mastery of evaluating trade-offs between fraud mitigation and UX, ensuring security strategies protect the business without compromising key conversion and retention metrics.
Architect Scalable Data Systems: Expert-level SQL/Python skills used to build automated, high-volume data architectures and statistical models that serve as the foundation for global risk detection.
Drive Strategic Influence: A proactive leader who uses cross-functional persuasion to align stakeholders across product lines and owns the end-to-end execution of complex initiatives in fluid environments.
Founders’ Mentality: You need to have a positive, proactive attitude, being able to identify problems, raise proposals, and be an advocate of your initiatives. Learn, iterate, and excel.
Skills Required
- BA/BS in Statistics, Information Systems, Mathematics, Data Science, or equivalent experience and 5-8 years in Fraud Analytics across multiple product lines
- Proven track record reducing account takeover (ATO) and scam losses across multiple product lines
- Operational understanding of perimeter threats (credential stuffing, MFA bombing, SIM swap, mule-account farming, synthetic identity, first-party intent fraud)
- Hands-on device forensics experience: device fingerprinting, emulator/VM detection, jailbreak/root signals, and device-graph analysis
- Proven experience building cross-product fraud strategy and governing shared risk infrastructure
- Working knowledge of onboarding orchestration and IDV vendor stacks (Socure, Persona, Veriff)
- Familiarity with rules engines (Oscilar, SAFE, Camunda) and translating signals into production policy
- Working knowledge of money movement rails and designing risk-tiered decisioning for ACH, FedNow, Wire, Zelle, and P2P
- Expert-level SQL and Python skills to build automated, high-volume data architectures and features
- Ability to balance fraud mitigation with user experience and drive cross-functional alignment and execution
- Proactive, founder mentality; ability to identify problems, propose solutions, iterate, and advocate initiatives
What the Team is Saying
What We Do
SoFi wasn’t built to be a bank. Or a technology company. We were built for one mission: help people achieve financial independence so they can realize their ambitions. Redefining an entire industry isn’t easy work—and it’s not for the faint of heart. It takes a certain kind of team. People with diverse perspectives and expertise, united by a common sense of purpose. People willing to challenge assumptions but always do the right thing. People proving that innovation and responsibility don’t have to compete, but can come together to create something truly unconventional in the world. For the last eight years, we’ve been charting this new path forward. We call it The SoFi Way. At SoFi, we don’t just talk about culture: we live it. The SoFi Way is how we show up every day, how we make decisions, and how we build for our members, clients, and each other.
Why Work With Us
Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation Fintech company using innovative, mobile-first technology to help our members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront.
Gallery
SoFi Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
For the majority of our workforce who work on a hybrid schedule, the in-office requirement is a handful of days per month!
