Senior Cyber Fraud Threat Intelligence Investigator

5 hours, 17 minutes ago
Senior
Data Science and Analytics
Overwatch

Overwatch

Overwatch offers an AI-powered threat intelligence platform that enables cyber and fraud teams to detect, investigate, and respond to digital threats in real time by leveraging automated agents and expert insights from a vast array of sources, includin...

Internet Software & Services
1-10
Founded 2022

Description

  • Own customer requests for information from intake, scoping, and research through evidence assessment and delivery.
  • Conduct rapid and long-term investigations into fraud schemes, threat actors, criminal communities, exposed data, suspicious infrastructure, and emerging campaigns.
  • Search, validate, and contextualize intelligence from internal collections and relevant external open, deep-, and dark-web sources.
  • Analyze fraud schemes, including actor roles, infrastructure, tools, victim targeting, monetization methods, and intervention points.
  • Track and assess fraud TTPs across account takeover, payment fraud, phishing, scams, identity abuse, compromised data, and money-mule activity.
  • Identify, evaluate, and document new intelligence sources, source relationships, migrations, reliability, and coverage gaps.
  • Produce client-ready RFI responses, threat assessments, executive summaries, actor profiles, flash reports, and research reports.
  • Preserve evidence, source links, timestamps, confidence assessments, and investigative steps to ensure findings are reproducible and defensible.
  • Present findings to customers and translate recurring intelligence needs into monitoring, collection, and product priorities.
  • Review analyst- and AI-generated intelligence for accuracy, clarity, relevance, and sourcing.

Requirements

  • Experience in OSINT investigations, fraud intelligence, cyber threat intelligence, financial crime research, investigative journalism, law enforcement intelligence, or a related field.
  • Excellent writing and editing skills, with experience producing clear, evidence-backed reports for technical and executive audiences.
  • Strong knowledge of cyber-enabled fraud, including account takeover, payment fraud, phishing, scams, compromised cards and credentials, check fraud, identity abuse, or money-mule activity.
  • Ability to analyze fraud schemes as observable TTPs and connect actors, tools, infrastructure, and monetization methods.
  • Experience analyzing fragmented and unstructured material, including posts, chats, screenshots, files, logs, domains, and technical indicators.
  • Strong analytical judgment, including source evaluation, uncertainty communication, and evidence-based conclusions.
  • Ability to manage multiple investigations and deliver high-quality work under tight deadlines.
  • High standards for documentation, evidence preservation, operational security, privacy, and handling sensitive information.
  • Experience supporting financial-services organizations or familiarity with fraud operations and controls such as KYC/KYB, AML, merchant risk, authentication, transaction monitoring, or fraud detection (preferred).
  • Familiarity with cybercrime ecosystems and tools such as Telegram, forums, marketplaces, deep- and dark-web sources, OSINT, link analysis, domain infrastructure, blockchain analysis, stealer logs, or data analysis; relevant foreign-language skills are a plus.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Head of Security & Network Operations

PDI Technologies, 1001-5000 Gas Utilities

Lead PDI Technologies’ global, customer-facing SOC and NOC as a unified 24/7 operation, improving security outcomes, network reliability, service quality, and delivery economics for 12,000+ customers.

AWS Azure GCP
8 hours, 2 minutes ago

Cyber Security Analyst I (Sunday - Thursday 9:30pm to 7:30am shift)

Tusker 201-500 Consumer Services

Tusker is seeking an entry-level Cyber Security Analyst I to monitor and respond to security events for MSSP clients on a consistent overnight SOC shift.

Active Directory Cybersecurity
8 hours, 17 minutes ago

L3 SOC Analyst

Saviynt 501-1000 Internet Software & Services

Saviynt is hiring a UK-based L3 SOC Analyst to lead advanced investigations, threat detection, and security automation for government-focused cloud and hybrid environments.

AWS Bash CrowdStrike Cybersecurity Go Kubernetes PowerShell Python Splunk
1 day, 5 hours ago

Incident Response Program Lead

iSeatz 51-200 Consumer Services

iSeatz is hiring a remote Incident Response Program Lead to build and run its security incident response program and govern MSSP operations for its travel and loyalty commerce platform.

AWS Cloudflare Network Security SIEM
1 day, 8 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers