Benevity is looking for a Senior Fraud Operations Analyst with a strong background in Fraud Operations to join our team. It will be equal parts focused on monitoring, detection, and response for cybersecurity related incidents but also a heavy emphasis on the monitoring, detection, and response of financial fraud related incidents as we move billions of dollars of money between 100s of clients to thousands/millions of non-profits. You will also guide, coach, and mentor junior analysts, sharing your expertise to grow the team's skills and confidence. This is a role for someone who thrives in technical investigations, but also wants to shape strategy, strengthen processes, leverage automation/AI, and develop people. What you'll do: • Monitor and investigate security alerts from security tooling and responding to escalations from our MDR provider. • Lead triage, root-cause analysis, and response activities during security incidents. • Develop and maintain incident response playbooks and runbooks. • Support proactive threat hunting and continuous improvement of detection capabilities. • Utilize AI enabled tooling and technology purpose built for non-profit fraud monitoring, as well as commercially available tools and technologies fit for purpose. • Investigate fraud attempts such as: • Account takeovers involving donor, nonprofit, or client accounts • EFT mismatches or anomalies during fund disbursements or payouts • Suspicious activity patterns in donations, volunteering, or user access • Collaborate with stakeholders across the business including Legal, Finance, Non-Profits Team and other teams to refine detection rules, alerts, and workflows. • Leverage automation and AI/ML models to improve fraud detection, security monitoring, and incident response. • Contribute to building automated processes and playbooks to accelerate detection and response. • Influence and improve fraud operations processes, including prevention strategies and use of intelligent tooling. • Provide mentorship, coaching, and support to junior security and fraud analysts. • Model best practices in investigation, communication, and decision-making during incidents. • Foster a collaborative culture focused on learning, knowledge sharing, and operational excellence. What you'll bring: • 3-5 years of experience in security operations, incident response, or fraud operations. • Hands-on experience with security tooling such as EDR, SIEM, CSPM, WAF, etc. • Hands-on experience with Fraud tooling such as transaction monitoring, case management, identity verification, anomaly detection, and behavioral analytics platforms • Strong understanding of fraud schemes relevant to Benevity, such as: • Account takeovers (unauthorized access to client or donor accounts) • EFT mismatches or anomalies (irregularities in electronic fund transfers or payouts) • Suspicious activity patterns across donations, volunteering, or user accounts • Financial fraud schemes including: • Impersonation fraud (fraudsters posing as legitimate people, nonprofits, or companies) • Document fraud (use of falsified or manipulated documents to enable fraud or account takeover) • Social engineering and phishing aimed at obtaining account credentials or financial information • Ability to conduct log analysis and packet analysis. • Familiarity with frameworks such as MITRE ATT&CK and NIST. • Demonstrated ability to mentor and coach junior team members. • Proven track record of improving operational processes in security or fraud contexts. • Strong communication skills, with the ability to bridge technical and business audiences. • Experience applying automation or AI/ML techniques to enhance fraud detection, threat hunting, or incident response. Nice to Have: • Certifications such as GCIA, GCIH, CEH, CFE, or CISM. • Scripting/automation experience (Python, PowerShell, Bash). • Cloud security experience (AWS, Azure, GCP). • Knowledge of compliance frameworks (PCI DSS, SOC 2, ISO27001, GDPR).