Cybersecurity Fraud Analyst

Fidelity National Financial; Pittsburgh (Allegheny County); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Fidelity National Financial is seeking a Cybersecurity Analyst who will focus on monitoring, threat detection, incident response, and cyber investigations.

A secondary role includes supporting enterprise fraud operations by investigating fraud schemes, collaborating with internal teams and external partners.

Hybrid work in Pittsburgh with on-site work 3–4 days per week at NCFTA facility.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• 3–7+ years in cybersecurity operations or incident response.
• Experience with SIEM tools (Splunk, Microsoft Sentinel, QRadar, or XSIAM).
• Knowledge of MITRE ATT&CK.

Responsibilities

• Monitor security tools, alerts, and threat intel.
• Investigate activity across networks, endpoints, cloud, apps.
• Triage, contain, eradicate, and recover from incidents.
• Identify IOCs, TTPs, and conduct threat hunting.
• Support digital forensics and incident response activities.
• Review logs from SIEM, EDR, cloud security, identity.
• Collaborate with threat intel partners.

Skills

Incident response

Threat hunting

Security analytics

Network security

Cloud security

Identity management

Communication skills

Education

Bachelor's degree in Cybersecurity, Information Security, CS, or related field

Tools

Splunk

Microsoft Sentinel

QRadar

XSIAM

Job description

The Cybersecurity Analyst will primarily focus on cybersecurity monitoring, threat detection, incident response, and cyber investigations. As a secondary responsibility, this position will support enterprise fraud operations by conducting fraud investigations, identifying fraud trends, supporting financial crime prevention efforts, and collaborating with internal business units and external partners.

The ideal candidate combines strong technical cybersecurity capabilities with analytical thinking, investigative skills, and an interest in combating both cybercrime and fraud targeting a Fortune 500 enterprise.

LOCATION

• Hybrid schedule working 3 – 4 days per week onsite at the National Cyber-Forensics and Training Alliance (NCFTA) facility in Pittsburgh, PA.

DUTIES & RESPONSIBILITIES

Cybersecurity Operations (Approximately 75%)

• Monitor enterprise security tools, alerts, and threat intelligence feeds.
• Investigate suspicious activity across networks, endpoints, cloud environments, and business applications.
• Analyze security incidents and conduct triage, containment, eradication, and recovery activities.
• Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs).
• Perform threat hunting and proactive investigations.
• Support digital forensics and incident response activities.
• Review logs from SIEM, EDR, cloud security, and identity management platforms.
• Collaborate with threat intelligence partners and industry information-sharing organizations.

Fraud Operations Support (Approximately 25%)

• Assist with investigations involving wire fraud, business email compromise, identity fraud, title fraud, account takeover, and other financial crimes.
• Analyze fraud cases and identify emerging trends and attack patterns.
• Support fraud prevention controls and fraud detection initiatives.
• Partner with legal, compliance, risk management, and business operations teams.
• Gather and preserve evidence supporting investigations.
• Produce fraud intelligence reports and recommendations.
• Coordinate with law enforcement and industry partners when appropriate.

MINIMUM REQUIREMENTS

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field.
• Requires 3-7+ years of experience in cybersecurity operations, incident response, threat hunting, cyber investigations, or security analysis.
• Experience using one or more SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Palo Alto XSIAM.
• Knowledge of common attack frameworks including MITRE ATT&CK.
• Understanding of network security, endpoint security, cloud security, and identity management.
• Experience analyzing security logs and conducting investigations.
• Strong verbal and written communication skills.
• Ability to obtain and maintain access to the NCFTA facility.

PREFERRED EXPERIENCE

• Experience supporting fraud investigations or financial crime programs.
• Knowledge of wire fraud, payment fraud, real estate transaction fraud, business email compromise, or account takeover schemes.
• Familiarity with digital forensics methodologies.
• Experience with threat intelligence platforms.
• Knowledge of Microsoft 365, Azure, AWS, and cloud security controls.
• Experience working with law enforcement, intelligence-sharing organizations, or industry consortiums.
• One or more of the following certifications:CISSP, GIAC GCIH, GCFA, GCIA, Security+, CySA+, CFE (Certified Fraud Examiner), CISA

COMPENSATION & BENEFITS

FNF, its affiliates, and subsidiaries carefully considers multiple factors to determine compensation, including a candidate's education, training, specialty, experience, and work location. The base salary (exempt) or hourly rate (non-exempt) is just one component of the total rewards package offered to our employees, including potential bonus or commission eligibility, insurance (medical/dental/vision/life/disability), matching 401(k) plan and matching employee stock purchase plan.

EQUAL OPPORTUNITY POLICY

FNF, its affiliates and subsidiaries, is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, protected veteran status, national origin, sexual orientation, gender identity or expression (including transgender status), genetic information or any other characteristic protected by applicable law.