about 4 hours ago
Responsibilities
- Lead efforts to assess and improve SoFi’s enterprise cryptographic posture.
- Build and maintain an inventory of cryptographic assets.
- Partner with various teams to identify cryptographic dependencies.
- Provide technical guidance on SSL/TLS, PKI, and encryption.
- Define and document cryptographic standards and implementation guidance.
- Evaluate cryptographic risks and recommend security improvements.
- Translate cryptographic concepts into clear guidance for stakeholders.
- Drive cross-functional execution and ensure documentation of decisions.
- Support security assurance activities including threat modeling.
- Stay current on post-quantum cryptography developments.
Requirements
- 8+ years of experience in security engineering or applied cryptography.
- Experience with post-quantum cryptography and crypto-agility.
- Deep expertise in cryptographic algorithms and secure protocol design.
- Experience assessing cryptographic controls in production environments.
- Strong understanding of public cloud environments and cryptographic controls.
- Ability to identify cryptographic risks in technical architecture.
- Experience creating security standards and technical guidance.
- Strong communication skills for explaining complex concepts.
- Demonstrated ability to operate independently in ambiguous situations.
- Bachelor’s degree in a related field or equivalent practical experience.