Security Operations Lead

Our mission is to make higher education accessible and affordable for everyone. We empower students with financial support and supercharge their ability to pay down their debt, so they can get on the right financial track, fast.

We build tools that help people feel in control of their financial future, including:

• Private student loans - low rates, people-first service, and flexible payments.
• Student loan refinancing - break free from high-interest rates or monthly payments.
• Scholarships - access to thousands of scholarships to help students pay less.

Earnies are committed to helping students live their best lives, free from the stress of student debt. If you’re as passionate as we are about our mission, read more below, and let’s build something great together!

The Security Operations Lead position will report to the Director of Security.

As the Security Operations Lead, you will:

• Oversee Earnest’s security monitoring and incident response operations, ensuring rapid detection and containment of threats.
• Lead the development and tuning of detection logic, response workflows, and vulnerability management across our cloud-native environment.
• Serve as incident commander during security events, coordinating cross-functional teams and managing communications with key stakeholders.
• Manage the threat intelligence program and proactively conduct threat hunting based on emerging indicators and TTPs.
• Partner with engineering, infrastructure, and compliance teams to embed security into day-to-day operations and maintain audit readiness.
• Mentor and guide junior team members, helping to build a resilient, high-performing security operations function.

About You:

• 8+ years of cybersecurity operations experience with a track record of leading incident response, threat detection, and vulnerability remediation.
• 2+ years in a formal leadership or program ownership role (SOC, IR, etc.).
• Expertise in modern cloud environments (e.g., AWS), Kubernetes, Linux, and SaaS applications.
• Proficient in tools such as SIEM, EDR/XDR, SOAR, IDS/IPS, vulnerability scanners, threat intel platforms.
• Experience responding to security incidents in regulated industries (e.g., fintech, healthcare).
• Strong communication and leadership skills – able to lead complex incidents and present findings to executive audiences.
• Knowledge of regulatory standards such as SOC 2, GLBA, SOX, NY DFS, etc.
• Certifications like GCIH, GCIA, GCFA, GREM, or CISSP are a plus.
• Willingness to travel to the Oakland office monthly to collaborate with other Earnies.

Even Better:

• Experience in fintech or another highly regulated environment.
• Background in digital forensics, malware analysis, or adversary emulation.
• Familiarity with frameworks like MITRE ATT&CK or OSC&R.

Where:

• This role will be based in the San Francisco Bay Area.
• While you’ll enjoy the flexibility of remote work, we also love to see our Earnies face-to-face! We ask you to join us at our Oakland office for 3 consecutive days a month for team collaboration and some fun. It's a chance to connect, share ideas, and maybe even grab some coffee together!

#LI-KB1

Earnest believes in enabling our employees to live their best lives. We offer a variety of perks and competitive benefits, including: 

• Health, Dental, & Vision benefits plus savings plans
• Mac computers + work-from-home stipend to set up your home office
• Monthly internet and phone reimbursement
• Employee Stock Purchase Plan
• Restricted Stock Units (RSUs)
• 401(k) plan to help you save for retirement plus a company match
• Robust tuition reimbursement program
• $1,000 travel perk on each Earnie-versary to anywhere in the world 
• Competitive days of annual PTO
• Competitive parental leave

What makes an “Earnie” culture: 

• Drivers – Drivers are satisfied by making things happen, not coming along for the ride. They feel a strong sense of ownership for their projects and teams and demand high standards from themselves and others.
• Humility – Humble team players check their egos and consider the team’s needs above their own. They are self-aware of their strengths and opportunities for improvement.
• Growth Mindset – People with a growth mindset approach challenges and failures as learning opportunities. They seek feedback to improve, give feedback to others, and genuinely want to perform well. 

At Earnest, we are committed to building an environment where our employees feel included, valued, and heard. Our belief is that a strong commitment to diversity, inclusion, equity, and belonging enables us to move forward with our mission. We are dedicated to adding new perspectives to the team and encourage anyone to apply if your experience is close to what we are looking for.  

Earnest provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, veteran status, disability or genetics. Qualified applicants with criminal histories will be considered for the position in a manner consistent with the Fair Chance Ordinance.