Offensive Security Lead — AI-Driven Pen Testing & Red Team

SoFi; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Benefits at SoFi

Job summary

SoFi is seeking an Offensive Security Lead in San Francisco to mature and scale Penetration Testing and Red Team programs. This hands-on leadership role combines deep technical work with building the operating model and AI-assisted tooling that accelerates reconnaissance, exploit development, and reporting.

You will own strategy, staffing, and metrics, partner with engineering, risk, and audit teams, hire and mentor staff, and present program progress to executives.

Qualifications

• 8+ years in offensive security with hands-on pentesting and red team experience.
• 2+ years directly managing or leading offensive security teams, ideally in regulated industries.
• Proven experience designing AI-led or AI-assisted offensive security programs.
• Deep fluency across network, web/app, cloud, and mobile attack surfaces; familiarity with adversary emulation frameworks.
• Experience operating in regulated environments with auditors/examiners a plus.
• Relevant certifications (OSCP, OSCE, OSEP, GPEN, GXPN, CRTO) preferred.

Responsibilities

• Unify Penetration Testing and Red Team into a single Offensive Security function with shared standards and reporting.
• Set and execute the offensive security roadmap aligned to risk and product pace.
• Build and scale AI-augmented offensive security capabilities and tooling.
• Personally lead engagements across network, app, cloud, and AI pentests; emulate adversaries.
• Hire, coach, and grow a mixed team; define clear career paths between disciplines.
• Define KPIs for coverage, severity, remediation velocity, and program ROI; report to leadership.
• Partner with Vulnerability Management, SOC, App Security, and Eng to ensure remediation.
• Manage external vendors for tooling and execution; oversee scoping and quality.
• Present findings and program strategy to executives and auditors.

Skills

Penetration testing

Red team

Offensive security

Team leadership

AI-assisted security

Network security

Cloud security

Communication

MITRE ATT&CK

Education

OSCP

OSCE

OSEP

GPEN

GXPN

CRTO

Tools

MITRE ATT&CK

AI tooling

C2 tooling

Job description

SoFi is seeking an Offensive Security Lead in San Francisco to mature and scale Penetration Testing and Red Team programs. This hands-on leadership role combines deep technical work with building the operating model and AI-assisted tooling that accelerates reconnaissance, exploit development, and reporting.

You will own strategy, staffing, and metrics, partner with engineering, risk, and audit teams, hire and mentor staff, and present program progress to executives.