Staff Enterprise Security Engineer
WA - Seattle · CA - San Francisco · UT - Cottonwood Heights · NY - New York City · TX - Frisco · 2-3 years experience · Full-time · Remote · Posted Oct 8, 2026
At a glance
- Experience
- 2-3 years experience
- Employment
- Full-time
- Workplace
- Remote
- Location
- WA - Seattle · CA - San Francisco · UT - Cottonwood Heights · NY - New York City · TX - Frisco
About the role
- As a Staff Enterprise Security Engineer at SoFi, you will serve as the subject matter expert for Data Loss Prevention (DLP) while driving engineering across broader enterprise security domains.
- This role balances technical focus on data protection with hands-on architecture, operation, and automation of foundational IT and corporate security controls.
Responsibilities
- Lead end-to-end delivery and architecture for enterprise security capabilities: enterprise zero-trust networks, endpoint security, and SaaS posture management.
- Frame complex security challenges: clarify security requirements, threat models, failure modes, and success metrics while proposing clear architectural options and tradeoffs.
- Design for scale and resilience: establish secure baseline configurations, automate security guardrails, and reduce systemic attack surfaces with minimal enterprise friction.
- Collaborate with internal security teams to establish and maintain threat signaling to ensure that proper visibility and alerting is achieved across tooling.
- Raise cybersecurity standards through design reviews, active mentorship of team members, and establishing enterprise security patterns and best practices.
- Collaborate cross-functionally with IT, Infrastructure, Risk/Compliance, and Engineering teams to deliver secure member outcomes.
Requirements
- Bachelor’s Degree + 3–4 Years of Experience OR Master’s Degree + 2–3 Years of Experience in Cybersecurity, Computer Science, Information Technology, or a related field.
- 3+ years of experience in cybersecurity with a focus on Data Loss Prevention (DLP).
- Hands-on experience with cloud-based DLP solutions (e.g., Zscaler, Proofpoint, Sentra).
- Experience administering and operating core enterprise security tools (EDR, email security gateways, and web proxies).
- Experience with Infrastructure as Code (IaC) solutions such as Terraform, along with scripting languages (Python, Go, or PowerShell) for tooling and automation.
- Experience with incident response, log analysis, threat detection, and digital forensics.
- Experience collaborating with multiple lines of defense for issue analysis, evidence gathering and remediation.
- Proven problem-solving skills with the ability to work independently and collaboratively in a fast-paced environment.
- Solid written and verbal communication skills for technical documentation, cross-functional collaboration, and threat modeling.
Preferred qualifications
- Professional security certifications (e.g., CISSP, CCSP, CISM, or AWS Certified Security Specialty).
- Experience with CI/CD security pipeline automation, SIEM detections, and SOAR playbooks.
- Knowledge of financial compliance frameworks and regulatory environments (PCI-DSS, SOC1/SOC2, SOX, GLBA, NIST CSF, ISO 27001).
Skills
- Zscaler
- Proofpoint
- Sentra
- CrowdStrike
- Terraform
- Python
- Go
- PowerShell
- EDR
- SIEM
- SOAR
.jpg){kind=logo}