AI-Driven Offensive Security Lead

SoFi; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

SoFi is seeking an Offensive Security Lead to mature and expand its Penetration Testing and Red Team functions. This hands-on leadership role requires running engagements and designing the operating model that lets a small team scale with a fast-growing fintech.

You will own strategy, staffing, tooling, and execution quality, build AI-augmented capabilities, and partner with engineering, product, risk, and security teams to drive real remediation and measurable program ROI.

Qualifications

• 8+ years in offensive security with hands-on testing and red team experience.
• 2+ years leading offensive security teams, preferably in regulated industries.
• Proven experience designing and implementing AI-led or AI-assisted offensive security programs.
• Deep fluency across network, web/application, cloud (AWS/GCP/Azure) and mobile attack surfaces; familiarity with MITRE ATT&CK and C2 tooling.

Responsibilities

• Lead and unify Penetration Testing and Red Team into a single Offensive Security function with shared standards and reporting.
• Set and execute the offensive security roadmap aligned to risk, regulatory obligations, and product/platform pace.
• Build and scale AI-augmented offensive security capabilities with tooling and workflows that increase coverage and throughput.
• Lead engagements in network, application, cloud, and AI pentests as needed; remain technically credible with the team.
• Manage and develop the team: hire, coach, mentor, and create career paths between disciplines and leadership roles.
• Define program KPIs for coverage, severity, remediation velocity, engagement quality, and ROI; report to senior leadership.

Skills

Offensive security leadership

AI-powered security tooling

Regulated industry experience

Security program development

Job description

SoFi is seeking an Offensive Security Lead to mature and expand its Penetration Testing and Red Team functions. This hands-on leadership role requires running engagements and designing the operating model that lets a small team scale with a fast-growing fintech.

You will own strategy, staffing, tooling, and execution quality, build AI-augmented capabilities, and partner with engineering, product, risk, and security teams to drive real remediation and measurable program ROI.