About this role
Employee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The role
We are searching for a Principal Fraud Strategist to own SoFi’s authentication and device trust discipline end to end. This is a sophisticated, platform-level role at the intersection of adversarial threat intelligence, device intelligence, and risk decisioning architecture. You will design the layered defense that protects every member session at SoFi: login, password reset, MFA, step-up, account recovery, and high-risk transaction moments across web and mobile. You will own device trust outright: identification, recognition, intelligence, entity resolution, and the signal development work that keeps SoFi ahead of ATO, scam, and perimeter attack patterns as they evolve. The role spans strategy, orchestration, and vendor stack design (Transmit Security Mosaic and beyond), and scales across Money, Invest, Crypto, Card, and Lending. You will work cross-functionally with EPD, IAM, Fraud Ops, InfoSec, Product, and Data Science, and influence vendor roadmaps where SoFi’s needs run ahead of what the market ships.
By joining SoFi, you'll become part of a forward-thinking company that is transforming financial services for the better. We offer the excitement of a rapidly growing startup with the stability of an industry leading leadership team.
What you’ll do:
The Principal Fraud Strategist, Authentication and Device Trust will help SoFi build and continuously evolve a layered authentication and device trust defense by:
• Owning end-to-end strategy for authentication and device trust across web and mobile: signal architecture, decisioning topology, rule construction, threshold tuning, champion/challenger lifecycle, and rule-level loss and false-positive attribution.
• Architecting the layered perimeter defense against ATO, scam interception (authorized push payment, remote access, impostor, investment, business email compromise), credential stuffing, MFA bombing, OTP interception, SIM swap, adversary-in-the-middle phishing, and emulator-driven bot traffic. Convert live campaign telemetry into policy changes at the speed of the attack.
• Owning the device trust discipline: device identification, recognition, and intelligence across web and mobile; behavioral biometrics; network reputation; device-graph and entity resolution; emulator and VM detection; jailbreak and root