Top Fintech Cybersecurity Jobs in New York City, NY

Leads enterprise AI security architecture and strategy across LLM applications, RAG pipelines, agent workflows, and cloud-native platforms. Establishes security standards, governance requirements, guardrails, threat models, and secure development patterns. Drives remediation of AI-specific risks including prompt injection, jailbreaks, data exposure, unsafe tool usage, and excessive permissions. Partners with senior engineering, product, architecture, and security leaders, leads investigations, supports automated security testing, represents AI security in governance forums, and mentors security engineers.

Provides enterprise technical leadership for identity and access management architecture across Microsoft environments. Designs authentication, authorization, federation, identity governance, privileged access, Zero Trust, and lifecycle-management solutions. Defines reference architectures, standards, roadmaps, and security controls; leads architecture reviews and threat modeling; partners with cybersecurity, infrastructure, application, risk, and architecture teams; mentors engineers; and advises senior leadership. Applies AI-assisted development responsibly while meeting security, compliance, privacy, and regulatory requirements.

Owns end-to-end endpoint detection coverage, including telemetry requirements, behavioral detection engineering, alert deployment, tuning, and coverage gap analysis. The role develops Detection-as-Code rules, applies MITRE ATT&CK and threat research, leverages AI and machine learning, collaborates with security operations and threat intelligence teams, and mentors engineers. Responsibilities include endpoint log analysis, EDR engineering, adversary emulation alignment, risk communication, compliance documentation, and high-fidelity detection development at enterprise scale.

Leads enterprise authentication engineering strategy, architecture, delivery, reliability, and user experience across workforce, applications, APIs, cloud, hybrid environments, non-human identities, and AI agents. Oversees federation, SSO, MFA, passkeys, authorization, PKI, workload identity, and continuous authentication. Directly manages authentication engineers, including hiring, staffing, performance management, technical guidance, and career development. Represents Cybersecurity in governance forums and drives secure, scalable authentication modernization.

Leads SoFi’s Offensive Security function, unifying penetration testing and red teaming. Owns strategy, staffing, tooling, metrics, vendor relationships, regulatory engagement, and execution quality. Builds AI-assisted offensive security capabilities for reconnaissance, exploit development, attack-path analysis, testing, and reporting. Personally contributes to network, application, cloud, mobile, AI, and adversary-emulation engagements while hiring, coaching, and developing the team and partnering with engineering, risk, vulnerability management, and incident response.

Execute technology control testing, risk assessments, audit and assurance activities across PCI DSS, SOC, and ISO 27001 frameworks. Assess control design and effectiveness, identify technology risks and gaps, support remediation and audit readiness, analyze risk data, and improve assurance processes through automation, analytics, AI, and continuous monitoring. Partner with engineering, security, product, architecture, operations, auditors, and customers to strengthen secure, resilient technology controls.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Lead and scale Brigit's IT Operations: manage day-to-day support, own IAM/SSO (Okta), maintain VPN and security tooling (SIEM, IDS/IPS, firewalls), drive audit readiness (SOC, PCI, SOX), improve incident response, document processes, and partner cross-functionally on security and compliance.

Leads enterprise cybersecurity governance, compliance, audit, risk assessment, control assurance, and regulatory readiness. Establishes policies, frameworks, metrics, and executive reporting; oversees remediation of control deficiencies; modernizes GRC through automation and AI; and develops global teams. Partners with Technology, Product, Legal, Privacy, Risk, Internal Audit, regulators, and business leaders to manage cyber risk and drive enterprise-wide change.

Provides hands-on endpoint, mobile, network, and infrastructure security for executives, remote offices, and sensitive locations. Responsibilities include configuring devices and controls, conducting site security assessments, remediating gaps, troubleshooting security systems, coordinating with Physical Security and vendors, maintaining documentation and runbooks, supporting audits, and responding to urgent after-hours issues. Regular domestic and international travel is required.