Cybersecurity Analyst (Fraud Ops Support)

01400 Rocky Mountain Support Services; Pittsburgh (Allegheny County); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Employee stock purchase plan

Job summary

FNF is seeking a Cybersecurity Analyst to monitor enterprise security, detect threats, respond to incidents, and conduct cyber investigations. The role also supports fraud operations by analyzing financial crime trends and working with legal, compliance, and operations teams.

The hybrid position requires 3–4 days onsite at the NCFTA facility in Pittsburgh, PA, with responsibilities spanning security operations and fraud prevention across multiple business units.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field.
• 3–7+ years of experience in cybersecurity operations, incident response, threat hunting, cyber investigations, or security analysis.
• Experience using one or more SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Palo Alto XSIAM.
• Knowledge of MITRE ATT&CK and network, endpoint, cloud, and identity security.
• Strong written and verbal communication skills.
• Ability to obtain and maintain access to the NCFTA facility.

Responsibilities

• Cybersecurity Operations: monitor security tools, investigate alarms, analyze incidents, and perform containment, eradication, and recovery.
• Fraud Operations Support: assist investigations into wire fraud, BEC, identity fraud, and other financial crimes; produce intelligence reports and coordinate with law enforcement.

Skills

Threat hunting

Incident response

Cyber investigations

Analytical thinking

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field

Tools

Splunk

Microsoft Sentinel

QRadar

Palo Alto XSIAM

Job description

FNF® is the leading provider of title insurance and settlement services to the real estate and mortgage industries. FNF®'s various mortgage and real estate services companies provide services that complement our title insurance business. From a full-service qualified intermediary, home warranties, UCC insurance, relocation services, and notary services, we provide essential services to fulfill the needs of a changing real estate industry. FNF® believes the power of technology can elevate the real estate transaction. From investments in title and escrow software to industry-leading real estate partner solutions, we take our commitment to provide real estate professionals and consumers with a truly reimagined, transparent, connected, and trusted real estate experience to heart.

POSITION OVERVIEW

The Cybersecurity Analyst will primarily focus on cybersecurity monitoring, threat detection, incident response, and cyber investigations. As a secondary responsibility, this position will support enterprise fraud operations by conducting fraud investigations, identifying fraud trends, supporting financial crime prevention efforts, and collaborating with internal business units and external partners. The ideal candidate combines strong technical cybersecurity capabilities with analytical thinking, investigative skills, and an interest in combating both cybercrime and fraud targeting a Fortune 500 enterprise.

LOCATION

Hybrid schedule working 3-4 days per week onsite at the National Cyber-Forensics and Training Alliance (NCFTA) facility in Pittsburgh, PA.

DUTIES & RESPONSIBILITIES

Cybersecurity Operations (Approximately 75%) Monitor enterprise security tools, alerts, and threat intelligence feeds. Investigate suspicious activity across networks, endpoints, cloud environments, and business applications. Analyze security incidents and conduct triage, containment, eradication, and recovery activities. Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs). Perform threat hunting and proactive investigations. Support digital forensics and incident response activities. Review logs from SIEM, EDR, cloud security, and identity management platforms. Collaborate with threat intelligence partners and industry information-sharing organizations.

Fraud Operations Support (Approximately 25%) Assist with investigations involving wire fraud, business email compromise, identity fraud, title fraud, account takeover, and other financial crimes. Analyze fraud cases and identify emerging trends and attack patterns. Support fraud prevention controls and fraud detection initiatives. Partner with legal, compliance, risk management, and business operations teams. Gather and preserve evidence supporting investigations. Produce fraud intelligence reports and recommendations. Coordinate with law enforcement and industry partners when appropriate.

MINIMUM REQUIREMENTS

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field.
• Requires 3-7+ years of experience in cybersecurity operations, incident response, threat hunting, cyber investigations, or security analysis.
• Experience using one or more SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Palo Alto XSIAM.
• Knowledge of common attack frameworks including MITRE ATT&CK.
• Understanding of network security, endpoint security, cloud security, and identity management.
• Experience analyzing security logs and conducting investigations.
• Strong verbal and written communication skills.
• Ability to obtain and maintain access to the NCFTA facility.

PREFERRED EXPERIENCE

• Experience supporting fraud investigations or financial crime programs.
• Knowledge of wire fraud, payment fraud, real estate transaction fraud, business email compromise, or account takeover schemes.
• Familiarity with digital forensics methodologies.
• Experience with threat intelligence platforms.
• Knowledge of Microsoft 365, Azure, AWS, and cloud security controls.
• Experience working with law enforcement, intelligence-sharing organizations, or industry consortiums.

One or more of the following certifications:

• CISSP, GIAC GCIH, GCFA, GCIA, Security+, CySA+, CFE (Certified Fraud Examiner), CISA

COMPENSATION & BENEFITS

FNF, its affiliates, and subsidiaries carefully considers multiple factors to determine compensation, including a candidate's education, training, specialty, experience, and work location. The base salary (exempt) or hourly rate (non-exempt) is just one component of the total rewards package offered to our employees, including potential bonus or commission eligibility, insurance (medical/dental/vision/life/disability), matching 401(k) plan and matching employee stock purchase plan.

EQUAL OPPORTUNITY POLICY

FNF, its affiliates and subsidiaries, is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, protected veteran status, national origin, sexual orientation, gender identity or expression (including transgender status), genetic information or any other characteristic protected by applicable law.

FNF® is the leading provider of title insurance and settlement services to the real estate and mortgage industries. FNF®'s various mortgage and real estate services companies provide services that complement our title insurance business. From a full-service qualified intermediary, home warranties, UCC insurance, relocation services, and notary services, we provide essential services to fulfill the needs of a changing real estate industry. FNF® believes the power of technology can elevate the real estate transaction. From investments in title and escrow software to industry-leading real estate partner solutions, we take our commitment to provide real estate professionals and consumers with a truly reimagined, transparent, connected, and trusted real estate experience to heart.