Get AI match insights
See your fit score & personalized tips.
Happiness score
23/100
Based on 60 verified employee signals
SoFi posts record $1.2B Q2 revenue and raises 2026 guidance
Q2 2026 GAAP net revenue rose 43% year over year to $1.22B, while net income increased 61% to $156.6M. SoFi raised adjusted net revenue guidance to $4.75B-$4.85B.
SoFi Technology Solutions appoints Kathleen Pierce-Gilmore as president
Former Visa executive Kathleen Pierce-Gilmore joined as president and the most senior leader of SoFi Technology Solutions, reporting to SoFi CEO Anthony Noto.
SoFi launches bank-issued SoFiUSD stablecoin for members
SoFi made SoFiUSD available in its app for members to buy, sell, hold and convert, calling it the first U.S. national bank-issued stablecoin offered directly through a banking app.
SoFi prices $1.5B public stock offering
SoFi priced 54,545,454 shares at $27.50 each for about $1.5B in gross proceeds, intended to strengthen capital and fund growth and other business opportunities.
AI Generated Insights
Own the strategy, staffing, tooling, and execution quality of Penetration Testing and Red Team, including building AI‑augmented capabilities and reporting metrics to senior leadership.
8+ years of offensive security experience across network, application, cloud and mobile, 2+ years leading such teams, and proven hands‑on work designing AI‑assisted penetration testing/red‑team programs.
The role centralizes offensive security to protect SoFi’s critical banking platforms, aligns testing with risk and regulatory demands, and drives remediation and detection across the organization.
Employee Applicant Privacy Notice
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The Role:
SoFi's Cyber Defense organization is looking for an Offensive Security Lead to mature and grow our Penetration Testing and Red Team functions. This is a hands-on leadership role for someone who has spent years both doing the work and building the program around it — someone equally comfortable running a red team engagement against a critical banking platform and designing the operating model that lets a small team of offensive operators keep pace with a fast-growing fintech.
A defining part of this role is modernizing how the team scales. We're looking for a leader who has already built and implemented AI-assisted penetration testing and red teaming programs — using AI tooling to accelerate reconnaissance, exploit development, attack-path analysis, and reporting — and who can bring that experience to bear on the program.
You'll own the strategy, staffing, tooling, and execution quality of both disciplines, report into Cyber Defense leadership, and act as a trusted advisor to engineering, product, and risk partners across the company.
What You’ll Do:
Lead and unify Penetration Testing and Red Team into a single, cohesive Offensive Security function — shared standards, shared tradecraft, shared reporting, distinct missions.
Set and execute the offensive security roadmap, aligning testing scope and cadence to SoFi's risk profile, regulatory obligations, and the pace of product and platform change in the company.
Build and scale AI-augmented offensive security capabilities — design and implement tooling and workflows (AI-assisted recon, vulnerability triage, exploit chaining, purple-team simulation, report generation) that increase the team's coverage and throughput without sacrificing depth or tradecraft.
Personally lead and contribute to engagements where needed — network, application, cloud, and AI pentests; adversary emulation and full-scope red team operations — staying technically credible with the team you lead.
Manage and develop the team: hire, coach, mentor, and grow a mix of penetration testers and red team operators; build clear career paths between the two disciplines and into leadership or other disciplines.
Own program metrics and maturity: define KPIs for coverage, finding severity and remediation velocity, engagement quality, and program ROI; report progress to senior leadership and risk committees.
Partner cross-functionally with Vulnerability Management, SOC/Incident Response, Application Security, and engineering teams to ensure offensive findings drive real remediation and inform detection engineering.
Manage external partnerships — third-party pentest and red team tooling and/or execution vendors, — including scoping, quality oversight, and budget.
Represent Offensive Security in audits, regulatory exams, and executive briefings, translating technical risk into business risk clearly and credibly.
What You’ll Need:
8+ years in offensive security, with demonstrated hands-on experience in both penetration testing and red team/adversary emulation — not just one discipline.
2+ years directly managing or leading offensive security teams, ideally within a regulated industry (financial services, fintech, healthcare, or similar).
Proven experience designing and implementing AI-led or AI-assisted offensive security programs — you can speak concretely to what you built, what tooling/models you used, what scaled and what didn't, and how it changed team output.
Deep technical fluency across network, web/application, cloud (AWS/GCP/Azure), and mobile attack surfaces, plus familiarity with adversary emulation frameworks (e.g., MITRE ATT&CK) and C2 tooling.
Track record of building programs from the ground up or maturing existing ones — process, tooling, metrics, and team structure, not just individual engagements.
Strong written and verbal communication skills; comfort presenting findings and program strategy to engineering leaders, risk teams, and executives.
Experience operating in a highly regulated environment and working with auditors/examiners is a strong plus.
Relevant certifications (OSCP, OSCE, OSEP, GPEN, GXPN, CRTO, or equivalent demonstrated experience) preferred but not required in lieu of strong hands-on track record.
