Senior Crypto Security Engineer

at SoFi

TX - Frisco

Who we are:

Shape a brighter financial future with us.

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

About the Role

We're looking for a talented Crypto Security Engineer to join our Security team. As a key member of a company operating at the forefront of crypto and fintech, you'll work to secure our infrastructure, protect our users' assets, and help build a world-class security posture across our platforms.

You’ll partner with engineering, product, compliance, and legal teams to ensure our security practices exceed regulatory and industry standards. You’ll also play a crucial role in detecting, preventing, and responding to threats targeting our applications, cloud infrastructure, and customers.

What You'll Do

Establish and maintain secure design principles tailored for cryptocurrency systems ensuring robust protection against evolving threats
Design and implement disaster recovery strategies, protocols, and systems to safeguard and recover crypto assets to ensure safety and security in the event of system failures or breaches
Collaborate with product and engineering teams to enforce security requirements for new and existing crypto products integrating security considerations into the product development lifecycle
Oversee the lifecycle of cryptographic keys and API keys used for crypto asset money movements implementing best practices for key generation, storage, rotation, and revocation to prevent unauthorized access
Design and develop secure custodial solutions for crypto assets
Design implement and maintain cloud security best practices to protect cloud based infrastructure across network security, identity and access management and data protection
Develop strategies to detect and mitigate insider threats
Create and maintain automation tools to streamline security operations, including vulnerability scanning, incident response, and compliance reporting
Enhance detection and response capabilities across crypto products and services to identify incidents promptly and develop response strategies to mitigate potential impact
Establish and enforce appropriate access management policies for crypto products and services including MFA, RBA, and regular access reviews
Evaluate smart contracts, blockchain protocols, and web3 infrastructure to identify vulnerabilities, recommend mitigations, and ensure secure integration of decentralized technologies
Conduct security assessments of of new crypto assets, defi protocols, and third party integrations, providing guidance on risk mitigation and secure adoption

What We Look For

3–6+ years of experience in cybersecurity engineering, preferably in fintech, crypto, or highly regulated industries.
Strong understanding of cloud security architecture and experience securing AWS or GCP environments.
Experience with containerization and orchestration tools like Docker and Kubernetes.
Proficiency in infrastructure-as-code (Terraform, CloudFormation) and automation (Python, Bash, Go).
Familiarity with common attack vectors and exploitation techniques (OWASP Top 10, MITRE ATT&CK).
Hands-on experience with SIEMs (Splunk, Datadog, ELK), endpoint protection, and IAM systems.
Deep knowledge of authentication/authorization protocols (OAuth2, SAML, OpenID).
Security certifications like CISSP, OSCP, or AWS Security Specialty are a plus.

Nice to Have

Experience in blockchain or cryptocurrency security
Experience with Cryptographic Systems and Key Management (Smart Contracts, Custody)
Familiarity with hardware security modules (HSMs) and key management practices.
Contributions to open-source security tools or frameworks.
Previous experience working in a startup or hyper-growth tech company.

Compensation and Benefits

The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location.

To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!

SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.

The Company hires the best qualified candidate for the job, without regard to protected characteristics.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

New York applicants: Notice of Employee Rights

SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email accommodations@sofi.com.

Due to insurance coverage issues, we are unable to accommodate remote work from Hawaii or Alaska at this time.

Internal Employees

If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.