Fraud Strategist - Ecosystem

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: We are searching for a Fraud Strategist, Ecosystem to own horizontal fraud strategy across the SoFi member journey. This is a sophisticated role for an operator who can reason across the entire product and user lifecycle as a single risk surface. You will design decisioning that travels with the member and recognizes perimeter threats and scam typologies as they cross product seams: onboarding, account creation, funding, money movement (ACH, FedNow, Wire, Zelle, P2P), and high-value product activity. The work requires fluency in device forensics, entity resolution, account takeover (ATO) defense, scam interception, and the rule-engine craft to translate that fluency into production policy. You will lead the cross-product signal layer that lets every product line see a member’s full risk posture, and replace fixed dollar caps with risk-tiered frameworks that price velocity, recency, and counterparty risk. By joining SoFi, you'll become part of a forward-thinking company that is transforming financial services for the better. We offer the excitement of a rapidly growing startup with the stability of an industry leading leadership team. What You’ll Do: The Fraud Strategist, Ecosystem will help SoFi build a unified cross-product fraud defense by: Owning fraud strategy across the full SoFi product surface, designing decisioning that uses signals from onboarding, login, money movement, and product activity together rather than in isolation. Leading cross-product perimeter defense covering ATO carryover from compromised credentials, scam interception (authorized push payment, romance, investment, impostor, business email compromise), mule-account detection, and synthetic-identity attacks at funding. Driving device forensics across product lines: shared device-graph infrastructure, emulator and VM detection, jailbreak and root signals, residential-proxy detection, and entity resolution that links a single bad actor across accounts that look clean in isolation. Designing risk-tiered money movement decisioning for ACH, FedNow, Wire, Zelle, and P2P flows, replacing fixed dollar caps with dynamic frameworks priced on velocity, recency, counterparty risk, and scam telemetry. Building the cross-product analytics layer in SQL and Python: shared feature tables, entity-resolution signals, and rule-level attribution that lets every product line see a member’s full risk posture. Partnering with EPD, Fraud Ops, InfoSec, and product owners to ship strategy changes through the rules engine with clean governance, performance monitoring, and clear escalation when losses deviate from forecast. What You’ll Need: BA/BS in Statistics, Information Systems, Mathematics, Data Science, or related fields, or equivalent work experience, and 5–8 years of work experience in Fraud Analytics across multiple product lines. ATO and Scam Defense: Demonstrated track record reducing account takeover and scam losses across more than one product line. Comfort with the scam taxonomy in detail: authorized push payment, romance, investment, impostor, remote access, business email compromise, and the shared signal between them. Perimeter Threat Fluency: Operational understanding of how perimeter threats (credential stuffing, MFA bombing, SIM swap, mule-account farming, synthetic identity at funding, first-party intent fraud) manifest at each entry surface of a multi-product fintech. Device Forensics: Hands-on experience with device fingerprinting, emulator and VM detection, jailbreak and root signals, behavioral biometrics, and entity-level device-graph analysis as a tool for linking accounts across products. Cross-Product Reasoning: Demonstrated track record building fraud strategy that spans more than one product line, with explicit framing of where signals transfer, where they do not, and how to govern shared risk infrastructure. Money Movement and Onboarding: Working knowledge of onboarding orchestration, IDV vendor stacks (Socure, Persona, Veriff), rules engines (Oscilar, SAFE, Camunda), and the economics of risk-tiered limits in real-time payments. Balance Friction and Growth: Deep mastery of evaluating trade-offs between fraud mitigation and UX, ensuring security strategies protect the business without compromising key conversion and retention metrics. Architect Scalable Data Systems: Expert-level SQL/Python skills used to build automated, high-volume data architectures and statistical models that serve as the foundation for global risk detection. Drive Strategic Influence: A proactive leader who uses cross-functional persuasion to align stakeholders across product lines and owns the end-to-end execution of complex initiatives in fluid environments. Founders’ Mentality: You need to have a positive, proactive attitude, being able to identify problems, raise proposals, and be an advocate of your initiatives. Learn, iterate, and excel. Compensation and Benefits The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location. To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page! SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law. The Company hires the best qualified candidate for the job, without regard to protected characteristics. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. New York applicants: Notice of Employee Rights SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email View email address on click.appcast.io. Due to insurance coverage issues, we are unable to accommodate remote work from Hawaii or Alaska at this time. Internal Employees If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.