Top Cyber Security Jobs

Lead end-to-end strategy and execution of enterprise data governance and privacy programs (Privacy Rights Management). Translate policy into technical requirements, drive automation (DSARs, PRM), define controls (RBAC, metadata, lineage, retention), partner with engineering, legal, and compliance, and report program status and risks to leadership.

Design and own login and authentication fraud strategy across web and mobile: detect and mitigate ATO, credential stuffing, MFA bombing, SIM swap, OTP interception, and emulator/bot traffic; drive device forensics and behavioral signals; build step-up auth, account recovery, and high-risk decisioning; coordinate with InfoSec, IAM, Fraud Ops, and partners to translate threat intel into production policies and optimize approval/loss trade-offs.

Owner of cross-product fraud strategy designing unified decisioning across onboarding, login, funding, and money movement. Lead device forensics, entity resolution, scam interception, and risk-tiered money-movement policies. Build shared analytics (SQL/Python), partner with product, Fraud Ops, and InfoSec to deploy rules-engine policies, monitor performance, and govern cross-product risk infrastructure.

Lead and mature SoFi's vulnerability management program, driving prioritization, cross-functional remediation campaigns, governance, KPIs, and executive reporting. Build operating rhythms for intake, triage, tracking, escalation, and continuous improvement across security, engineering, product, and risk teams to reduce mean time to remediate and improve measurable risk outcomes.

Manage and monitor information security risks and controls across the enterprise. Partner with security owners, execute RCSA activities, coordinate with 2LOD and audit, track remediation, prepare executive briefings, support training and policy guidance, and communicate security posture to stakeholders.