Senior Staff Security Architect (Digital Assets)

About the job

Employee Applicant Privacy Notice

Who we are:

Shape a brighter financial future with us.

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

The role:

The SoFi Security Architecture and Enablement team assists and partners with engineering, product, and design organizations to build secure products and services delivered to our members and customers. We deploy proven Product Security practices, compliance frameworks, and design patterns while collaborating with product owners, engineers, and executives to ensure new products and features meet the highest security standards and regulations.

As a Senior Staff Security Architect (Digital Assets), you will serve as the principal technical authority responsible for the end-to-end security architecture of our digital asset platforms, products, and services. You will work in conjunction with security, compliance, and risk teams to guide strategic decisions, drive architectural blueprints, and lead initiatives that ensure timely delivery of resilient security solutions supporting our business targets. The ideal candidate is highly collaborative, adept at balancing robust security with business goals, and inspired to creatively solve complex Product Security challenges across high-velocity distributed environments.

What you’ll do:

• Advocate and establish security standards and best practices across digital assets and crypto currencies product lifecycles.

• Lead threat modeling, architecture design reviews, and define technical security standards for crypto platforms.

• Architect end-to-end security architectures for custody, deposit, withdrawal, staking, and treasury operations.

• Design and implement Multi-Party Computation (MPC) protocols, multi-signature workflows, and Hardware Security Module (HSM) / Key Management Service (KMS) key lifecycles.

• Secure wallet integrations, partner APIs, and critical connections with institutional custody providers and settlement networks.

• Automate security verification checks (SAST, DAST, SCA) and embed "security as code" controls into continuous delivery pipelines.

• Assess smart contract ecosystems, cloud environments, and blockchain infrastructure to identify vulnerabilities and engineer mitigations.

• Partner with Legal, Risk, and Compliance teams to evaluate digital asset regulatory requirements, perform security impact assessments, and establish digital asset policies.

• Develop security test plans, build reusable blueprint solutions, and balance stringent crypto security controls with a seamless member user experience.

• Partner across multiple engineering teams to raise the security bar, mentoring senior engineers and leading incident response coordination for complex crypto threats.

What you’ll need:

• Education & Minimum Experience Requirements: Bachelor’s degree + 4+ years of relevant experience OR Master’s degree + 3+ years of relevant experience in Computer Science, Information Security, Engineering, or a related technical discipline.

• Proven security architecture experience with deep specialization in cryptocurrency, digital assets, and decentralized systems.

• Demonstrated technical expertise in applied cryptography, Multi-Party Computation (MPC), Threshold Cryptography, and HSM/KMS key lifecycle management.

• Solid track record designing end-to-end Zero Trust security architectures for high-stakes institutional crypto custody, staking, trading, and settlement platforms.

• In-depth knowledge of core blockchain protocol internals, transaction signing lifecycles, and multi-signature wallet infrastructures.

• Proven proficiency in threat modeling, smart contract auditing, vulnerability assessments, and secure API design.

• Hands-on experience architecting secure cloud-native environments (AWS, Kubernetes) and embedding automated "security as code" controls into CI/CD pipelines.

• Demonstrated ability to partner with Legal, Risk, and Compliance teams to interpret digital asset regulations and operationalize compliance requirements.

• Exceptional communication and presentation skills, with a proven ability to translate complex cryptographic concepts for technical teams and senior leadership.

Nice to have:

• 10+ years of security architecture experience across enterprise infrastructure, product security, and cloud ecosystems.

• Advanced degree (Master’s or Ph.D.) in Computer Science, Engineering, or a related technical discipline.

• Recognized security certifications such as CISSP, CISM, GSEC, or AWS Certified Security – Specialty.

• Proven background in financial services infrastructure, banking technologies, or supporting institutional finance platforms.

• Direct experience integrating digital asset platforms, custody platforms, trading platforms, and crypto operations.

• Broad familiarity with financial regulatory frameworks (such as SOC 2, PCI-DSS, GLBA, and NYDFS).

Compensation and Benefits

The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location.

To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!

SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.

The Company hires the best qualified candidate for the job, without regard to protected characteristics.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

New York applicants: Notice of Employee Rights

SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email accommodations@sofi.com.

We are unable to accommodate remote work from Hawaii, Alaska or Puerto Rico at this time.

Internal Employees

If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.