Security Analyst

Navia Benefit Solutions•Moraine, OH

3d•Remote

About The Position

We are seeking a Security Analyst with an emphasis on fraud research to join our Information Security team. This role is responsible for identifying, researching, and helping mitigate computer-based and non-computer-based fraudulent activity across the organization. The analyst will support the investigation of suspicious activity, review trends and patterns that may indicate fraud risk, and help strengthen internal controls through monitoring, analysis, documentation, and reporting. This position works closely with the Director of Information Security and cross-functional business partners to support fraud prevention efforts, incident response, and risk management activities.

Requirements

Bachelor’s degree in information technology, cybersecurity, criminal justice, business, data analysis, or a related field, or equivalent relevant work experience.
3+ years of experience in information security, fraud analysis, fraud operations, investigations, risk management, or a related field.
Strong security knowledge in a regulated industry such as healthcare or banking
Experience researching and investigating suspicious activity, fraud indicators, or security events.
Strong analytical and critical thinking skills with the ability to identify patterns, anomalies, and areas of risk.
Experience reviewing logs, reports, or transactional data to support investigations and decision-making.
Strong written and verbal communication skills, including the ability to clearly document findings and present recommendations.
Ability to handle sensitive and confidential information with sound judgment and discretion.
Familiarity with phishing, social engineering, account compromise, identity-related fraud, and common fraud prevention practices.
Working knowledge of security concepts such as access control, logging, monitoring, incident response, and risk assessment.
Proficiency with Microsoft Office tools, especially Excel, Word, and Outlook; experience with security or fraud monitoring tools is a plus.
Ability to work independently, manage multiple priorities, and collaborate effectively across teams.

Nice To Haves

Familiarity with regulatory and security frameworks such as NIST, HIPAA, CCPA, SOC, and other applicable compliance requirements is preferred.

Responsibilities

Maintain confidentiality of sensitive information in a high-trust role.
Research, identify, and analyze potentially fraudulent activity across systems, transactions, accounts, and business processes.
Review alerts, logs, reports, and other data sources to detect suspicious behavior, anomalies, or fraud indicators.
Experience working with SIEM products for alert consolidation and ability to make recommendations on improving reporting and alerting.
Experience reviewing alerts and reporting and making recommendations related to security in O365, cloud environment, and AI.
Investigate suspected fraud events and document findings, supporting evidence, root cause, and recommended next steps.
Assist with fraud trend analysis by identifying recurring patterns, emerging risks, and indicators of compromise or abuse.
Support monitoring of internal and external activity that may present fraud risk, including account misuse, social engineering attempts, suspicious access, and unusual transaction behavior.
Conduct research into known and emerging fraud schemes, including account takeover, impersonation, payment fraud, benefits fraud, and other forms of abuse relevant to the organization.
Develop and maintain fraud case documentation, including timelines, findings, evidence, and recommended corrective actions.
Partner with internal teams such as IT, Security, Compliance, HR, Finance, and Operations to evaluate suspicious activity and support coordinated fraud response efforts.
Support the refinement of fraud detection processes, alerts, and review criteria to improve identification of suspicious activity and reduce false positives.
Track and report on fraud attempts, confirmed incidents, loss trends, investigation outcomes, and control gaps to support leadership decision-making.
Knowledge of incident response processes and escalation.
Recommend improvements to policies, procedures, and internal controls based on fraud investigations, observed trends, and root cause analysis.
Review reported phishing emails and support related fraud or social engineering investigations.
Assist in the development and execution of monthly phishing campaigns and user awareness activities.
Audit user access privileges and support access reviews to identify inappropriate, excessive, or suspicious access.
Review network, system, and security logs for indicators of fraud, misuse, or policy violations.
Prepare clear, accurate, and timely reports on suspicious activity, fraud investigations, and risk trends for leadership review.
Support the maintenance of case records, investigative documentation, and evidence needed for audit, compliance, or internal review purposes.
Partner with business units to research fraud concerns, validate suspicious activity, and recommend mitigation steps.
Support vendor, client, or third-party security and fraud-related review activities as assigned.
Stay current on fraud schemes, threat trends, investigative techniques, and security best practices.