[Hiring] Principal Fraud Strategist @SoFi

Role Description

We are searching for a Principal Fraud Strategist to own SoFi’s authentication and device trust discipline end to end. This is a sophisticated, platform-level role at the intersection of adversarial threat intelligence, device intelligence, and risk decisioning architecture. You will design the layered defense that protects every member session at SoFi: login, password reset, MFA, step-up, account recovery, and high-risk transaction moments across web and mobile.

You will own device trust outright: identification, recognition, intelligence, entity resolution, and the signal development work that keeps SoFi ahead of ATO, scam, and perimeter attack patterns as they evolve. The role spans strategy, orchestration, and vendor stack design (Transmit Security Mosaic and beyond), and scales across Money, Invest, Crypto, Card, and Lending. You will work cross-functionally with EPD, IAM, Fraud Ops, InfoSec, Product, and Data Science, and influence vendor roadmaps where SoFi’s needs run ahead of what the market ships.

What you’ll do:

• Own end-to-end strategy for authentication and device trust across web and mobile: signal architecture, decisioning topology, rule construction, threshold tuning, champion/challenger lifecycle, and rule-level loss and false-positive attribution.
• Architect the layered perimeter defense against ATO, scam interception (authorized push payment, remote access, impostor, investment, business email compromise), credential stuffing, MFA bombing, OTP interception, SIM swap, adversary-in-the-middle phishing, and emulator-driven bot traffic.
• Convert live campaign telemetry into policy changes at the speed of the attack.
• Own the device trust discipline: device identification, recognition, and intelligence across web and mobile; behavioral biometrics; network reputation; device-graph and entity resolution; emulator and VM detection; jailbreak and root signals; residential-proxy detection; and signal development for gaps the current vendor stack does not cover.
• Orchestrate the vendor stack that underpins authentication and device trust (Transmit Security Mosaic and adjacent providers): capability assessment, integration design, data flow architecture, decision timing, and continuous performance tuning.
• Influence vendor roadmaps where SoFi has needs the market has not yet met.
• Design step-up authentication, account recovery, and high-risk transaction decisioning that synthesizes device, behavioral, network, and credential-risk signals into a single decision with explicit FPR budgets per surface.
• Keep controls invisible to legitimate members wherever possible.
• Lead 3DS, CNP, and tokenization decisioning for card-not-present transactions, coordinating with issuer processing and network rules to optimize approval rate without ceding losses.
• Partner with InfoSec threat intelligence on credential-capture campaigns, phishing kits, SEO poisoning, and ATO-as-a-service marketplaces.
• Translate intelligence into rule changes inside the live policy stack and into new signal development priorities.
• Set the technical bar for how SoFi builds durable fraud defense.
• Mentor the broader fraud strategy organization on authentication, device intelligence, and adversarial reasoning.

Qualifications

• BA/BS in Statistics, Information Systems, Mathematics, Data Science, Computer Science, or related fields, or equivalent work experience.
• 15+ years of work experience in Fraud Strategy, Authentication Risk, Device Intelligence, or Adversarial Security Engineering.

Requirements

• Deep track record reducing account takeover and scam losses across banking, card, crypto, and P2P surfaces.
• Operational understanding of credential stuffing, MFA bombing, OTP interception, SIM swap, adversary-in-the-middle phishing, residential-proxy abuse, and emulator-driven automation.
• Hands-on architectural experience with device identification, recognition, and intelligence platforms.
• Proven ability to identify signal gaps in production systems and develop new signals.
• Track record designing holistic fraud systems across multiple vendors, data feeds, and decisioning layers.
• Working knowledge of FIDO2/passkeys, OAuth/OIDC, 3DS protocol mechanics, tokenization.
• Deep mastery of evaluating trade-offs between fraud mitigation and UX.
• Expert-level SQL/Python skills used to build automated, high-volume data architectures and statistical models.
• A proactive leader who uses cross-functional persuasion to align EPD, IAM, InfoSec, Fraud Ops, and vendor partners on strategy changes.
• Positive, proactive attitude, able to identify problems, raise proposals, and advocate for initiatives.

Compensation and Benefits

The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location.

To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!