below marketmost similar roles pay hereabove market
This role pays more than
64%
of similar roles. Most pay
$151,106–$216,000
— the blue band above.
At the midpoint, this role pays about
$196k
versus about
$184k
for comparable roles.
Based on 240 similar postings.
Employer
About SoFi
SoFi Technologies is a fintech company offering student and personal loans, mortgages, credit cards, investing, banking, and insurance products, positioning itself as a one-stop financial services platform. Industry: Financial Technology & Personal Finance
SoFi currently has
16 open roles
on FindRole.
Listed pay typically runs
$172,800–$247,500
across 13 roles with salary data.
As a Staff Enterprise Security Engineer within the Enterprise Security team, you will serve as the subject matter expert for Data Loss Prevention while driving engineering across broader security domains. You will lead the architecture and delivery of enterprise zero-trust networks, endpoint security, and SaaS posture management. Your daily work involves defining risk mitigation strategies, building technical roadmaps, and automating security guardrails to reduce systemic attack surfaces. You will utilize tools such as Zscaler, Proofpoint, Sentra, and CrowdStrike, while employing Infrastructure as Code via Terraform and scripting in Python, Go, or PowerShell. The role focuses on solving complex security challenges through threat modeling, incident response, and log analysis to ensure data protection and secure member outcomes within a financial services environment.
Lead end-to-end architecture and delivery for zero-trust networks, endpoint security, and SaaS posture management.
Serve as the subject matter expert for Data Loss Prevention (DLP) across the enterprise.
Define risk mitigation strategies and build technical roadmaps for enterprise security capabilities.
Design secure baseline configurations and automate security guardrails to reduce systemic attack surfaces.
Frame complex security challenges by clarifying requirements, threat models, failure modes, and success metrics.
Administer and operate core security tools including EDR, email security gateways, and web proxies.
Establish enterprise security patterns and best practices through design reviews and active mentorship.
Collaborate with IT, Infrastructure, and Risk teams to deliver secure member outcomes.
What we're looking for
Bachelor’s Degree plus 3–4 years of experience OR Master’s Degree plus 2–3 years of experience in Cybersecurity, Computer Science, IT, or a related field.
3+ years of experience in cybersecurity with a focus on Data Loss Prevention (DLP).
Hands-on experience with cloud-based DLP solutions such as Zscaler, Proofpoint, or Sentra.
Experience administering and operating core enterprise security tools including EDR, email security gateways, and web proxies.
Experience with Infrastructure as Code (IaC) solutions like Terraform and scripting languages such as Python, Go, or PowerShell.
Experience with incident response, log analysis, threat detection, and digital forensics.
Professional security certifications such as CISSP, CCSP, CISM, or AWS Certified Security Specialty (preferred).
Knowledge of financial compliance frameworks such as PCI-DSS, SOC1/SOC2, SOX, GLBA, NIST CSF, or ISO 27001 (preferred).
EDR
XDR
Zero Trust
SASE
ZTNA
Python
Golang
Java
C/C++
Endpoint Security
Infrastructure Security
System Hardening
Data Loss Prevention
SaaS Security
AI/ML
Automation
macOS
Windows
Linux
Data Loss Prevention (DLP)
Microsoft Purview
Microsoft 365
DevSecOps
Policy-as-Code
Security-as-Code
Infrastructure as Code (IaC)
CI/CD
Python
PowerShell
Terraform
Bicep
YAML
JSON
REST APIs
CASB
Defender for Cloud Apps
SIEM
SOAR
Cloud Security
Data Governance
Data Classification