Cybersecurity Analyst (Fraud Ops Support)

Fidelity National Financial•Pittsburgh, PA

10d•Hybrid

About The Position

The Cybersecurity Analyst will primarily focus on cybersecurity monitoring, threat detection, incident response, and cyber investigations. As a secondary responsibility, this position will support enterprise fraud operations by conducting fraud investigations, identifying fraud trends, supporting financial crime prevention efforts, and collaborating with internal business units and external partners. The ideal candidate combines strong technical cybersecurity capabilities with analytical thinking, investigative skills, and an interest in combating both cybercrime and fraud targeting a Fortune 500 enterprise.

Requirements

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field.
3-7+ years of experience in cybersecurity operations, incident response, threat hunting, cyber investigations, or security analysis.
Experience using one or more SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Palo Alto XSIAM.
Knowledge of common attack frameworks including MITRE ATT&CK.
Understanding of network security, endpoint security, cloud security, and identity management.
Experience analyzing security logs and conducting investigations.
Strong verbal and written communication skills.
Ability to obtain and maintain access to the NCFTA facility.

Nice To Haves

Experience supporting fraud investigations or financial crime programs.
Knowledge of wire fraud, payment fraud, real estate transaction fraud, business email compromise, or account takeover schemes.
Familiarity with digital forensics methodologies.
Experience with threat intelligence platforms.
Knowledge of Microsoft 365, Azure, AWS, and cloud security controls.
Experience working with law enforcement, intelligence-sharing organizations, or industry consortiums.
One or more of the following certifications: CISSP, GIAC GCIH, GCFA, GCIA, Security+, CySA+, CFE (Certified Fraud Examiner), CISA

Responsibilities

Monitor enterprise security tools, alerts, and threat intelligence feeds.
Investigate suspicious activity across networks, endpoints, cloud environments, and business applications.
Analyze security incidents and conduct triage, containment, eradication, and recovery activities.
Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs).
Perform threat hunting and proactive investigations.
Support digital forensics and incident response activities.
Review logs from SIEM, EDR, cloud security, and identity management platforms.
Collaborate with threat intelligence partners and industry information-sharing organizations.
Assist with investigations involving wire fraud, business email compromise, identity fraud, title fraud, account takeover, and other financial crimes.
Analyze fraud cases and identify emerging trends and attack patterns.
Support fraud prevention controls and fraud detection initiatives.
Partner with legal, compliance, risk management, and business operations teams.
Gather and preserve evidence supporting investigations.
Produce fraud intelligence reports and recommendations.
Coordinate with law enforcement and industry partners when appropriate.