AI-Driven Offensive Security Lead

SoFi; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

SoFi's Cyber Defense team is seeking an Offensive Security Lead in New York to mature the Penetration Testing and Red Team functions. This hands-on leadership role requires building AI-assisted testing programs and designing the operating model for a fast-growing fintech.

You will own strategy, staffing, tooling, and engagement quality, partner with engineering and risk, and drive measurable program ROI while reporting to Cyber Defense leadership.

Qualifications

• 8+ years in offensive security with hands-on testing and red team work.
• 2+ years leading offensive security teams in regulated environments.
• Experience designing AI-led or AI-assisted security programs with measurable impact.
• Fluency across network, web/app, cloud, and mobile attack surfaces; strong communication.
• Familiarity with auditors/examiners is a plus.

Responsibilities

• Lead Penetration Testing and Red Team into a cohesive Offensive Security function.
• Set the offensive security roadmap aligned with risk and regulatory needs.
• Build AI‑augmented capabilities for recon, exploit development, and reporting.
• Lead engagements across network, application, cloud, and adversary emulation.
• Hire, coach, and develop the team; define career paths and growth.
• Own program metrics, KPIs, and ROI; report to Cyber Defense leadership.
• Partner with Vulnerability Management, SOC, App Sec, and engineering to drive remediation.

Skills

Penetration testing

Red team

AI-assisted security

Cloud security

MITRE ATT&CK

C2 tooling

Leadership

Communication

Education

OSCP

OSCE

OSEP

GPEN

GXPN

CRTO

Tools

AI tooling

MITRE ATT&CK

Vulnerability management

Job description

SoFi's Cyber Defense team is seeking an Offensive Security Lead in New York to mature the Penetration Testing and Red Team functions. This hands-on leadership role requires building AI-assisted testing programs and designing the operating model for a fast-growing fintech.

You will own strategy, staffing, tooling, and engagement quality, partner with engineering and risk, and drive measurable program ROI while reporting to Cyber Defense leadership.