Security Analyst

Position Summary

Essential Functions

• Maintain confidentiality of sensitive information in a high-trust role.
• Research, identify, and analyze potentially fraudulent activity across systems, transactions, accounts, and business processes.
• Review alerts, logs, reports, and other data sources to detect suspicious behavior, anomalies, or fraud indicators.
• Experience working with SIEM products for alert consolidation and ability to make recommendations on improving reporting and alerting.
• Experience reviewing alerts and reporting and making recommendations related to security in O365, cloud environment, and AI.
• Investigate suspected fraud events and document findings, supporting evidence, root cause, and recommended next steps.
• Assist with fraud trend analysis by identifying recurring patterns, emerging risks, and indicators of compromise or abuse.
• Support monitoring of internal and external activity that may present fraud risk, including account misuse, social engineering attempts, suspicious access, and unusual transaction behavior.
• Conduct research into known and emerging fraud schemes, including account takeover, impersonation, payment fraud, benefits fraud, and other forms of abuse relevant to the organization.
• Develop and maintain fraud case documentation, including timelines, findings, evidence, and recommended corrective actions.
• Partner with internal teams such as IT, Security, Compliance, HR, Finance, and Operations to evaluate suspicious activity and support coordinated fraud response efforts.
• Support the refinement of fraud detection processes, alerts, and review criteria to improve identification of suspicious activity and reduce false positives.
• Track and report on fraud attempts, confirmed incidents, loss trends, investigation outcomes, and control gaps to support leadership decision-making.
• Knowledge of incident response processes and escalation.
• Recommend improvements to policies, procedures, and internal controls based on fraud investigations, observed trends, and root cause analysis.
• Review reported phishing emails and support related fraud or social engineering investigations.
• Assist in the development and execution of monthly phishing campaigns and user awareness activities.
• Audit user access privileges and support access reviews to identify inappropriate, excessive, or suspicious access.
• Review network, system, and security logs for indicators of fraud, misuse, or policy violations.
• Prepare clear, accurate, and timely reports on suspicious activity, fraud investigations, and risk trends for leadership review.
• Support the maintenance of case records, investigative documentation, and evidence needed for audit, compliance, or internal review purposes.
• Partner with business units to research fraud concerns, validate suspicious activity, and recommend mitigation steps.
• Support vendor, client, or third-party security and fraud-related review activities as assigned.
• Stay current on fraud schemes, threat trends, investigative techniques, and security best practices.

Requirements