Top Cyber Security Jobs

Design, build, and operationalize ML-based security and anomaly detection across large-scale telemetry. Own feature engineering, model training, evaluation, deployment, drift monitoring, and SOC feedback loops. Partner with SOC, threat intel, and fraud teams to reduce noise and improve detection coverage, and mentor engineers on applied ML and detection operations.

Lead enterprise cryptographic readiness focused on post-quantum preparedness and crypto-agility. Build and maintain cryptographic inventories, assess risks, define standards, review architectures, guide migrations (keys, algorithms, certificates, libraries), and drive cross-functional remediation and roadmaps alongside engineering, product, and security teams.

Lead design and implementation of scalable vulnerability management systems across applications, cloud, containers, supply chain, and hardware. Build automation for detection, enrichment, prioritization, routing, and tracking; respond to critical disclosures; drive remediation workflows, metrics, and standards; mentor engineers and partner with cross-functional teams to reduce vulnerability risk.

Lead end-to-end strategy and execution of enterprise data governance and privacy programs (Privacy Rights Management). Translate policy into technical requirements, drive automation (DSARs, PRM), define controls (RBAC, metadata, lineage, retention), partner with engineering, legal, and compliance, and report program status and risks to leadership.

Design and own login and authentication fraud strategy across web and mobile: detect and mitigate ATO, credential stuffing, MFA bombing, SIM swap, OTP interception, and emulator/bot traffic; drive device forensics and behavioral signals; build step-up auth, account recovery, and high-risk decisioning; coordinate with InfoSec, IAM, Fraud Ops, and partners to translate threat intel into production policies and optimize approval/loss trade-offs.

Owner of cross-product fraud strategy designing unified decisioning across onboarding, login, funding, and money movement. Lead device forensics, entity resolution, scam interception, and risk-tiered money-movement policies. Build shared analytics (SQL/Python), partner with product, Fraud Ops, and InfoSec to deploy rules-engine policies, monitor performance, and govern cross-product risk infrastructure.

Lead and mature SoFi's vulnerability management program, driving prioritization, cross-functional remediation campaigns, governance, KPIs, and executive reporting. Build operating rhythms for intake, triage, tracking, escalation, and continuous improvement across security, engineering, product, and risk teams to reduce mean time to remediate and improve measurable risk outcomes.

Manage and monitor information security risks and controls across the enterprise. Partner with security owners, execute RCSA activities, coordinate with 2LOD and audit, track remediation, prepare executive briefings, support training and policy guidance, and communicate security posture to stakeholders.