SoFi Technologies

3 weeks ago

Fraud Strategist - Login and Auth

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Own the perimeter of the authentication ecosystem by designing end-to-end fraud strategy across login, password reset, MFA, step-up, and high-risk session events. Build perimeter-threat defenses against ATO, scams, credential stuffing, OTP interception, SIM swap, and adversary-in-the-middle phishing. Lead device-forensics initiatives, translate telemetry into real-time policy updates, and drive risk decisioning for card-not-present and tokenization flows.

Location: Charlotte, Seattle, San Francisco, New York

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own end-to-end login risk strategy across web and mobile authentication, including signal selection, rule construction, threshold tuning, champion/challenger lifecycle, and loss attribution.
•Architect perimeter-threat defenses for ATO, authorized scams, MFA bombing, OTP interception, SIM swap, and adversary-in-the-middle phishing, translating campaign telemetry into policy updates quickly.
•Drive device forensics at depth using device fingerprinting, emulator/VM detection, jailbreak/root signals, residential-proxy detection, and entity-level device-graph analysis.
•Design step-up authentication, account recovery, and high-risk transaction decisioning by synthesizing device, behavioral, network, and credential-risk signals with FPR budgets.
•Lead 3DS, card-not-present, and tokenization risk decisioning, coordinating with issuer processing and network rules to optimize approvals without ceding losses.

Pay and Benefits

Salary: USD 115,200 - 216,000 annually

Key Requirements

•BA/BS in Statistics, Information Systems, Mathematics, Data Science, or related fields (or equivalent experience), plus 5–8 years in Fraud Analytics, Authentication Risk, or Adversarial Security Engineering.
•Demonstrated track record reducing account takeover and scam losses across banking, card, and crypto surfaces, with familiarity across the credential exposure to money-movement kill chain.
•Operational fluency with credential stuffing, MFA bombing, OTP interception, SIM swap, adversary-in-the-middle phishing, residential-proxy abuse, and emulator-driven automation.
•Hands-on device forensics experience including device fingerprinting, emulator/VM detection, jailbreak/root signals, behavioral biometrics, and entity-level device-graph analysis.
•Working knowledge of FIDO2/passkeys, OAuth/OIDC, 3DS mechanics, tokenization, and trade-offs between approval rate and chargeback exposure on CNP flows.

Experience:5-8 years

Education:Bachelor's in Statistics, Information Systems, Mathematics, Data Science

Skills:Cross-functional collaborationStrategic influenceProactive problem-solvingTrade-off analysisAdvocacy

Languages:English

Tech Stack:SQLPythonFIDO2PasskeysOAuthOIDC3DSTokenizationDevice fingerprintingBehavioral biometrics

Company Brief

SoFi Technologies

Industry: Neobanking

Website

Loading job details...

Preparing the role view and application actions.

SoFi Technologies

3 weeks ago

Fraud Strategist - Login and Auth

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: Charlotte, Seattle, San Francisco, New York

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own end-to-end login risk strategy across web and mobile authentication, including signal selection, rule construction, threshold tuning, champion/challenger lifecycle, and loss attribution.
•Architect perimeter-threat defenses for ATO, authorized scams, MFA bombing, OTP interception, SIM swap, and adversary-in-the-middle phishing, translating campaign telemetry into policy updates quickly.
•Drive device forensics at depth using device fingerprinting, emulator/VM detection, jailbreak/root signals, residential-proxy detection, and entity-level device-graph analysis.
•Design step-up authentication, account recovery, and high-risk transaction decisioning by synthesizing device, behavioral, network, and credential-risk signals with FPR budgets.
•Lead 3DS, card-not-present, and tokenization risk decisioning, coordinating with issuer processing and network rules to optimize approvals without ceding losses.

Pay and Benefits

Salary: USD 115,200 - 216,000 annually

Key Requirements

•BA/BS in Statistics, Information Systems, Mathematics, Data Science, or related fields (or equivalent experience), plus 5–8 years in Fraud Analytics, Authentication Risk, or Adversarial Security Engineering.
•Demonstrated track record reducing account takeover and scam losses across banking, card, and crypto surfaces, with familiarity across the credential exposure to money-movement kill chain.
•Operational fluency with credential stuffing, MFA bombing, OTP interception, SIM swap, adversary-in-the-middle phishing, residential-proxy abuse, and emulator-driven automation.
•Hands-on device forensics experience including device fingerprinting, emulator/VM detection, jailbreak/root signals, behavioral biometrics, and entity-level device-graph analysis.
•Working knowledge of FIDO2/passkeys, OAuth/OIDC, 3DS mechanics, tokenization, and trade-offs between approval rate and chargeback exposure on CNP flows.

Experience:5-8 years

Education:Bachelor's in Statistics, Information Systems, Mathematics, Data Science

Skills:Cross-functional collaborationStrategic influenceProactive problem-solvingTrade-off analysisAdvocacy

Languages:English

Tech Stack:SQLPythonFIDO2PasskeysOAuthOIDC3DSTokenizationDevice fingerprintingBehavioral biometrics

Company Brief

SoFi Technologies

Industry: Neobanking

Website