1 month ago
Responsibilities
- Perform vulnerability assessments using a range of vulnerability detection tools and drive vulnerability remediation and reporting.
- Assess vulnerability scope, impact, priority, and required response actions using risk ratings for vulnerabilities and assets.
- Conduct security reviews of products and production infrastructure and contribute to application security and offensive/red-team operations.
- Support security audits, regulatory exercises, compliance monitoring, and reporting.
- Coordinate treatment and remediation activities with system owners, points of contact, vendors, and business stakeholders.
- Maintain vulnerability-management tooling and develop processes, scripts, reports, and documentation to improve team efficiency.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, or equivalent work-related experience.
- Strong knowledge of vulnerability-management standards including CVE, CVSS, and OWASP.
- Experience using vulnerability assessment tools or DAST/SAST tools.
- Deep application security knowledge, including mapping vulnerabilities to exploitation indicators and investigative techniques.
- Hands-on experience with at least one of Bash, Go, Python, or Java.
- Experience with Secure Software Development Lifecycles.
- Strong ability to prioritize remediation based on vulnerability and asset risk and impact.
- Preferred: 2+ years of experience in an information technology or security role.
- Preferred: 2+ years of experience with cloud technologies and familiarity with AWS and at-scale services.
- Preferred: experience managing security-risk relationships with business units, vendors, and stakeholders; microservice architecture; and application development and testing tools.
- Preferred: master’s or PhD in Computer Science or Engineering and financial services experience.
Benefits
- The posting references comprehensive and competitive company benefits, with details available on SoFi’s Benefits page.
- The role cannot accommodate remote work from Hawaii, Alaska, or Puerto Rico.
About SoFi
SoFi provides consumer banking, lending, and investing products, including student-loan refinancing, personal loans, mortgages, checking and savings, a credit card, and brokerage. It earns interest and fee revenue across SoFi Bank, N.A., and related subsidiaries, serving U.S. consumers via a mobile app. Founded in 2011 and headquartered in San Francisco, SoFi Technologies is publicly traded on Nasdaq under the ticker SOFI.