S

Socure

Digital identity verification and fraud prevention

PhD Research Intern

Summer 2026Updated
No salary listed
Internship
PhD
Remote in USA
Remote
AI & Machine LearningAI Research

About the job

Requirements
  • Currently pursuing a PhD in Computer Science, Machine Learning, Statistics, Mathematics, or a related field
  • Strong research foundation in one or more of: Graph representation learning (e.g., GNNs, graph transformers), Transformer architectures and deep learning, LLMs and agentic AI systems, Adversarial, robust, or trustworthy machine learning
  • Demonstrated research capability (e.g., publications, preprints, or equivalent work)
  • Strong programming skills in Python
  • Experience with modern ML frameworks (e.g., PyTorch, TensorFlow, JAX)
  • Ability to independently scope and execute open-ended research problems
Responsibilities
  • Formulate and drive original research directions in graph learning for fraud detection, exploring architectures such as GNNs, graph transformers, and hybrid models
  • Design scalable approaches for dynamic, heterogeneous, and large-scale fraud graphs
  • Investigate agentic AI and LLM-augmented systems for automated risk reasoning, investigation workflows, and decision support
  • Develop robust learning techniques for adversarial and non-stationary environments
  • Conduct rigorous empirical evaluation on real-world, production-scale datasets
  • Translate research insights into practical system-level implications in collaboration with data scientists and engineers
  • Contribute to patent development and preparation of submissions to top-tier academic venues
Desired Qualifications
  • Publications at top-tier ML/AI/data mining conferences (e.g., NeurIPS, ICML, ICLR, KDD, WWW, WSDM, ACL)
  • Experience scaling graph-based or transformer-based architectures to large datasets
  • Familiarity with graph learning libraries (e.g., PyG, DGL)
  • Experience working with noisy, highly imbalanced, or adversarial datasets

About the company

S

Socure

View
cbWebsite

Socure provides digital identity verification and fraud prevention services for financial institutions through a subscription-based platform. It uses machine learning and advanced algorithms to analyze small amounts of customer data to predict fraud risk. A flagship feature, the Sigma Fraud Score, compares transactions against a proprietary database of known fraudulent users and traits to detect suspicious activity. Additional tools like Device Risk verify session authenticity by gathering device and browser signals, supporting seamless and secure customer experiences. Socure differentiates itself with a robust, data-driven fraud scoring system, a suite of identity verification and compliance tools, and continuous platform updates delivered as a service. Its goal is to help banks and other lenders verify customers quickly and accurately while reducing fraud and ensuring regulatory compliance (e.g., Customer Identification Programs under the Patriot Act).

Company Size

501-1,000

Company Stage

Series F

Total Funding

$900.1M

Headquarters

Incline Village-Crystal Bay, Nevada

Founded

2012

Get referred to Socure

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Socure raised $156 million at a $5.2 billion valuation on August 27, 2026.
  • Q2 2026 ARR reached $364 million, up 63% year over year.
  • Login.gov awarded Socure's Xcelerate partnership a five-year, $163 million call order.

What critics are saying

  • Binance.US, crypto, and government deals concentrate revenue in regulated buyers.
  • Persona, Sumsub, and Jumio pressure pricing as identity verification commoditizes.
  • If AI fraud outpaces models, Socure's trust brand collapses and churn follows.

What makes Socure unique

  • Socure's RiskOS fuses identity, device, behavioral, and fraud signals into one workflow.
  • August 2026 Fravity acquisition adds AI agents for investigations, not just scoring.
  • September 2026 mDL support with Google Wallet and Samsung Wallet matches new CIP guidance.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Competitive salary & equity
  • Comprehensive medical, dental, & vision coverage
  • FSA
  • Parental leave
  • 401k
  • Life insurance
  • PTO

Growth & Insights and Company News

6 month growth

-1%

1 year growth

-4%

2 year growth

-3%
ID Tech Wire
Oct 29th, 2026
Socure appoints former Confluent finance leader Rohan Sivaram as CFO.

Socure appoints former Confluent finance leader Rohan Sivaram as CFO. Socure has appointed Rohan Sivaram as chief financial officer, bringing in a finance executive who helped build Confluent's finance organization through its initial public offering and previously led finance at Palo Alto Networks. Socure described the appointment as marking its next chapter as a scaled, profitable company. Sivaram will oversee its global finance and operations organization, including capital markets and investor relations. He will also work with product and go-to-market teams on pricing and on the economics of scaling the company's agentic products. At Confluent, Sivaram helped build the finance organization through the company's IPO, its move to consumption pricing, its growth past $1 billion in annual recurring revenue and its $11 billion acquisition by IBM. Before that, he spent six years as senior vice president and head of finance at Palo Alto Networks, where revenue grew from about $500 million to $3.7 billion. The appointment follows Socure's August strategic growth investment, led by Summit Partners at a $5.2 billion valuation, and its acquisition of agentic operations platform Fravity, now called RiskOS_Agents. Earlier this month, the identity verification and fraud prevention company reported $42.7 million in third-quarter bookings and $34.2 million in renewals. Socure says AI-accelerated fraud across its network grew more than 8,000 percent year over year. Sivaram joins an executive team that Socure has expanded over the past year with Colton Pond as chief marketing officer, Chung-Man Tam as chief product officer, Pablo Abreu as chief AI and innovation officer and Mark Carter as chief information security officer. The company says the team is steering it as it expands internationally and extends its RiskOS platform to verify consumer, business and AI agent traffic. "Helping build the infrastructure that tells businesses who people are, and increasingly who's AI agents they're dealing with, alongside a team executing at this level, isn't an opportunity you see everyday," Sivaram said. "Rohan has helped Silicon Valley technology leaders navigate pivotal periods of growth, building finance organizations equipped to manage increasing scale and complexity, including the transition to public markets," said Johnny Ayers, Socure's founder and CEO. "AI has fundamentally changed the internet, making trusted identity essential to every interaction. Rohan's experience will allow us to scale with discipline to build the trust infrastructure required for the AI economy." By the ID Tech Editorial Team

Help Net Security
Oct 27th, 2026
Socure links AI agents to verified people and businesses.

Socure links AI agents to verified people and businesses. Socure has launched Agent Intelligence, a suite that detects AI agents, scores whether they should be trusted, and ties each agent to the verified person or business that authorized it. Agent Intelligence includes three layers in one platform designed to go beyond simple Know Your Agent (KYA) solutions: Agent Detection, generally available today inside Socure's existing Digital Intelligence offering, Agent TrustScore, open for beta customers now, and Agent Credential, reaching general availability in Q1 2027. The launch comes as the agentic revolution reaches every corner of the internet. In September 2026, daily requests from AI agents grew by more than 1,700% in a year, and for the first time more than half of internet traffic was not human. According to Accenture's 2026 Consumer Pulse report, 85% of consumers were open to collaborating with an AI agent and 74% were open to having the agent execute specific tasks. However, most organizations cannot differentiate traffic from new consumer agents: they cannot see them, do not know how many there are, and do not know what they are doing. The problem compounds because an agent puts another layer between the action and the person accountable for it, and every verification method in production at scale today was built to evaluate a human. "Human traffic is going to look like a rounding error next to agent traffic very quickly. But most companies still treat agents like bots and block them. This strategy stops working the moment your best customers attempt to engage with you using Muse or Instinct," said Johnny Ayers, CEO of Socure. "Block them all and you block your next customer. Let them all in and you hand fraudsters the keys, with little to no controls. The way out isn't better bot detection. It's clearly determining if it is an agent, which agent it is, and which human is on the other end of the agent, an evolution of the same problems we've been solving at Socure for more than a decade." Know Your Agent vendors generally address parts of the problem: some detect and classify automated traffic, while others only establish an agent's identity, link it to a principal, or verify credentials and delegated authority. These capabilities are often fragmented, and vendors lack the identity and fraud intelligence needed to assess the agent and its principal in order to make trust-based decisions. Socure's Agent Intelligence solution is the offering that detects, scores, and credentials agents on one identity graph: * Agent Detection: Identifies and classifies AI agents driving browser sessions, whether or not they declare themselves, and names the agent when it can be identified. Returns a confidence score and reason codes rather than a binary verdict, because control of a session can pass between a human and an agent mid-session. In lab results, named consumer agents such as Muse and Instinct were identified with 99.99% accuracy across 700 behavioral variables in controlled testing. * Agent TrustScore: A composite score built from three data categories: identity (who is this agent and who stands behind it), authorization (what is it permitted to do and is this within that permission), and risk (what the histories of the principal and operator indicate, including signs of replay or impersonation). All three are returned separately, so customers can decide on the attributes that matter most depending on their use case. * Agent Credential: A W3C Verifiable Credential via SocurePass that operators issue to their agents, binding the agent to a verified principal in Socure's identity graph. Any site can verify the credentials without calling Socure. Because the format supports cryptographic chaining and proof of possession, integrity can be carried through a delegation chain when one agent hands work to another. Operating within Socure's RiskOS platform, Socure's Agent Intelligence draws on Socure's trust infrastructure to assess an agent's identity. Socure resolves agents as nodes in the same global identity graph that already carries SocureID and a consumer's global device identifier, across more than 11 billion identity decisions annually. An agent stops being an anonymous session and becomes a known entity attached to a known person, with history. Organizations can allow, step up, or block based on their own risk thresholds, while platforms deploying AI agents can issue Socure-backed credentials that make their agents more detectable, identifiable, and trustworthy so they get blocked less. Agent Intelligence is deliberately agnostic to agent type, presentation and credential issuer. A trust score that only worked for Socure-issued agents would be useless to a relying party, so Agent TrustScore evaluates credentials from any issuer and agents that carry no credential at all. "Socure is the platform bringing together the data, models, and capabilities needed to detect, identify, and score the trustworthiness of agents," said Chung-Man Tam, Chief Product Officer at Socure. "Competitors have to assemble these capabilities through fragmented solutions that degrade accuracy. Socure delivers them together under one powerful umbrella, backed by our moat: a market-leading global identity graph, AI-powered fraud models that outperform by 40%+, and large-scale identity intelligence strengthened by a customer base of more than 6,000 companies." More about

Yahoo Finance
Sep 30th, 2026
Socure launches mDL verification with Samsung and Google as US regulators clear digital IDs

Socure has launched mobile driver's licence verification in its DocV identity verification product, allowing organisations to verify mDLs cryptographically from Google Wallet and Samsung Wallet during remote onboarding. The launch follows September 2026 guidance from FinCEN and other US regulators confirming that verifiable digital credentials can satisfy Customer Identification Program requirements. ABI Research projects the US mDL install base will grow from 21.7 million in 2025 to 143 million by 2030. Currently, 21 states issue mDLs conforming to ISO/IEC 18013-5 standards, with more than 8 million credentials active. Socure's system combines cryptographic validation with device, behavioural, and identity intelligence to assess user trustworthiness. The capability is available in Socure DocV and extends to government agencies through a partnership with Xcelerate Solutions under Login.gov's identity proofing agreement.

The Mirror Democrat and Savanna Times-Journal
Sep 30th, 2026
Socure launches mDL verification with Samsung and Google as regulators clear digital IDs.

Socure launches mDL verification with Samsung and Google as regulators clear digital IDs. * 3 hrs ago Socure, the leading trust infrastructure for global identity and risk intelligence, today announced U.S. mobile driver's license (mDL) verification in DocV, its identity verification product. Organizations can now verify mDLs cryptographically against the issuing state authority, presented from Google Wallet and Samsung Wallet, during remote onboarding and step-up flows. The launch follows a significant regulatory shift. On September 8th, 2026, FinCEN, Federal Reserve Board, FDIC, OCC and NCUA jointly issued FAQs confirming that an unexpired, government-issued verifiable digital credential can qualify as documentary evidence under the Customer Identification Program Rule. The guidance attaches a condition: the institution must have the technology or systems necessary to extract the required information. It also states that a digital credential is not automatically sufficient where there are indications of fraud, and that the institution must still form a reasonable belief that it knows the customer's true identity. Technology intelligence firm ABI Research projects the U.S. mDL install base will grow from 21.7 million in 2025 to 143 million by 2030, with 40 states issuing digital licenses. Today, 21 states issue mDLs conforming to the ISO/IEC 18013 standard, more than 8 million credentials are active, and roughly 45% of Americans live somewhere one is available. mDL verification complements Socure's physical document capture rather than replacing it, providing organizations a second path as digital wallets become part of how consumers carry their credentials. The harder problem is remote verification. Most mDL deployments to date have supported in-person presentation, the airport-checkpoint tap covered by Part 5 of the ISO standard. But the verifications that carry the most risk happen remotely - opening an account, claiming a benefit, onboarding to a platform - and remote presentation under Part 7 has been supported unevenly across wallets. Socure DocV now supports remote presentation from Google Wallet and Samsung Wallet, so the credential can be verified online with the issuing state standing behind it rather than inferred from a photograph of a plastic card. With Socure mDL verification, users digitally present their credentials from their mobile wallet during onboarding or step-up verification, without the need to photograph an ID. Verification can be completed in seconds, without retakes or upload errors, helping organizations reduce friction, improve conversion, and deliver a faster experience for legitimate users. "Socure's integration to leverage mobile driver's licenses expands the number of places that people can use their digital IDs, offering a high assurance, low friction verification experience," said Alan Stapelberg, Group Product Lead, Google Wallet. mDLs introduce a fundamentally different security model. When a state DMV issues an mDL, the credential is cryptographically signed. Socure uniquely uses cryptographic credential validation as the starting point, not the finish line, verifying that a mobile driver's license was issued by the state DMV, then layering in device, behavioral, and identity intelligence to help determine whether the person presenting it should be trusted. Taken together, the guidance describes the architecture Socure built. Cryptographic validation establishes that the state issued the credential and that it has not been altered. Socure then layers device, behavioral and identity intelligence to assess whether the person presenting it should be trusted - the reasonable-belief standard the agencies describe. For banks, credit unions, fintechs and other regulated businesses, that combination is what turns a regulatory allowance into a deployable workflow. "Mobile driver's licenses represent a major shift in how consumers prove who they are online," said Deepanker Saxena, Head of Document Verification at Socure. "We want organizations to be able to trust any credential a person shows up with, physical or digital, and pair that with device, behavioral, and identity risk signals so trustworthy users move fast and fraud gets stopped. Balancing the equation between trust and friction is an essential step to scaling consumer adoption within the U.S." The new mDL capability is now available in Socure DocV for organizations looking to modernize onboarding and step-up flows, reduce abandonment, and strengthen fraud prevention. As more consumers choose to verify with mobile credentials, organizations can deliver secure and high-quality experiences for gig workers, job seekers, and citizens using government services. Today's announcement comes alongside an extension of Socure's partnership with Xcelerate Solutions to support critical public sector use cases under the Login.gov Next Generation Identity Proofing Blanket Purchase Agreement. Operating within Socure's FedRAMP Moderate environment, the capability gives government agencies a secure, mobile-native way to verify state-issued digital credentials while reducing friction for citizens accessing online services. About Socure Socure is the leading AI-native trust infrastructure, providing identity and risk intelligence to the world. Socure is trusted by the largest enterprises and government agencies to build trust and mitigate risk with its identity verification, compliance and fraud prevention solutions. Leveraging AI and machine learning, Socure achieves the highest accuracy, automation, and capture rates in the industry. Serving more than 3,000 customers and 190+ countries across financial services, government, gaming, healthcare, telecom, and e-commerce, Socure's customer base includes the top five U.S. banks, four of the Mag 7, the largest HR payroll and workforce providers, four of the five largest U.S. crypto exchanges, the largest sportsbook and prediction market operators, 160 organizations across the public sector, and more than 600 fintechs. Leading organizations trust Socure to deliver certainty in identity across onboarding, authentication, payments, account changes, and regulatory compliance. Learn more at www.socure.com. Media gallery

PR Newswire
Sep 29th, 2026
Login.gov adds mobile driver's licence verification via Xcelerate Solutions and Socure partnership

Xcelerate Solutions and Socure are expanding support for Login.gov by integrating mobile driver's licenses as accepted identification for remote identity verification. The capability, announced 29 September, operates within Socure's FedRAMP Moderate environment and uses real-time identity checks, fraud detection, and behavioural analytics. Login.gov can now verify identity information directly from state-issued digital credentials based on ISO/IEC 18013 standards. The system offers tamper-evident verification whilst reducing the need to handle physical IDs. The partnership combines biometrics, machine learning, artificial intelligence, and digital identity credentials to provide identity-proofing services. Xcelerate Solutions is a national security company whilst Socure provides AI-native trust infrastructure serving over 3,000 customers across financial services, government, and e-commerce sectors.

INACTIVE