Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Offensive Security Lead role.
Rezi rewrites your resume against SoFi's job description. Free.
Tailor your resume to this Offensive Security Lead role.
Rezi rewrites your resume against SoFi's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Offensive Security Lead posting at SoFi — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Offensive Security Lead posting at SoFi — free, in seconds.
About the Role
SoFi's Cyber Defense organization is seeking an Offensive Security Lead to mature and grow its Penetration Testing and Red Team functions. This hands-on leadership role requires expertise in both performing offensive security work and building the surrounding program, with a focus on modernizing operations through AI-assisted techniques.
Responsibilities
- Lead and unify Penetration Testing and Red Team into a single, cohesive Offensive Security function.
- Set and execute the offensive security roadmap, aligning testing scope and cadence to SoFi's risk profile, regulatory obligations, and the pace of product and platform change.
- Build and scale AI-augmented offensive security capabilities, designing and implementing tooling and workflows to increase team coverage and throughput.
- Personally lead and contribute to engagements including network, application, cloud, and AI pentests, and adversary emulation and full-scope red team operations.
- Manage and develop the team: hire, coach, mentor, and grow a mix of penetration testers and red team operators.
- Own program metrics and maturity, defining KPIs for coverage, finding severity and remediation velocity, engagement quality, and program ROI.
- Partner cross-functionally with Vulnerability Management, SOC/Incident Response, Application Security, and engineering teams.
- Manage external partnerships, including third-party pentest and red team tooling and/or execution vendors.
- Represent Offensive Security in audits, regulatory exams, and executive briefings, translating technical risk into business risk.
Requirements
- 8+ years in offensive security, with demonstrated hands-on experience in both penetration testing and red team/adversary emulation.
- 2+ years directly managing or leading offensive security teams, ideally within a regulated industry.
- Proven experience designing and implementing AI-led or AI-assisted offensive security programs.
- Deep technical fluency across network, web/application, cloud (AWS/GCP/Azure), and mobile attack surfaces.
- Familiarity with adversary emulation frameworks (e.g., MITRE ATT&CK) and C2 tooling.
- Track record of building programs from the ground up or maturing existing ones.
- Strong written and verbal communication skills; comfort presenting findings and program strategy to engineering leaders, risk teams, and executives.
- Experience operating in a highly regulated environment and working with auditors/examiners is a strong plus.
- Relevant certifications (OSCP, OSCE, OSEP, GPEN, GXPN, CRTO, or equivalent demonstrated experience) preferred but not required.
Skills
- Penetration Testing
- Red Teaming
- AI-assisted penetration testing
- AI-assisted red teaming
- Network security
- Application security
- Cloud security (AWS/GCP/Azure)
- Mobile security
- Adversary emulation
- Vulnerability management
- Incident response
- Detection engineering
- Program management
- Team leadership
- Metrics and KPI definition
- Risk assessment
- Regulatory compliance
Location
- Remote (excluding Hawaii, Alaska or Puerto Rico)
Work Type
- Full-time
Experience Level
- Lead
- 8+ years in offensive security
- 2+ years management/leadership experience
Benefits
- Comprehensive and competitive benefits
About the Company
- Shape a brighter financial future with us.
- A next-generation financial services company and national bank using innovative, mobile-first technology.
- The industry is going through an unprecedented transformation, and we’re at the forefront.
- We are proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way.
- Join us to invest in yourself, your career, and the financial world.
Equal Opportunity
- SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.
- The Company hires the best qualified candidate for the job, without regard to protected characteristics.
- Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
- SoFi is committed to an inclusive culture.
- As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities.