Position Purpose:
We are seeking a highly skilled Senior Cybersecurity Fraud Engineer to join our Identity Fraud Prevention Team. This role will focus on designing, implementing, and optimizing fraud detection and prevention strategies in large-scale digital environments. You will work closely with cybersecurity, identity verification, risk, and data science teams to combat identity-related fraud, account takeovers (ATO), synthetic identities, and emerging fraud tactics.
Key Responsibilities
Fraud Detection & Prevention Engineering
Architect and enhance fraud prevention systems that integrate identity verification, authentication, and risk-based fraud decisioning.Develop and implement real-time fraud detection models leveraging behavioral biometrics, device intelligence, and identity proofing techniques.Collaborate with data science teams to build and optimize machine learning models for anomaly detection and fraud risk scoring.Engineer and fine-tune fraud detection rule sets within identity and access management (IAM) and fraud prevention platforms.Identity & Access Security
Implement risk-based authentication (RBA) and adaptive multi-factor authentication (MFA) strategies to mitigate identity fraud.Enhance identity proofing solutions by integrating advanced fraud signals, such as document verification, biometric authentication, and passive signals.Work with identity verification providers to continuously evaluate and improve KYC (Know Your Customer) and KYB (Know Your Business) processes.Support zero-trust security models by incorporating fraud risk intelligence into IAM and access control workflows.Threat Intelligence & Fraud Investigations
Analyze fraud attack vectors, such as bot-driven credential stuffing, synthetic identities, and social engineering exploits.Work with threat intelligence teams to track evolving fraud tactics and implement countermeasures.Conduct forensic analysis of fraud incidents to identify root causes and drive security enhancements.Technology & Platform Engineering
Build fraud detection integrations within CIAM (Customer Identity & Access Management) platforms such as ForgeRock, Ping Identity, Microsoft or custom IAM solutions.Develop APIs and automation workflows to ingest and analyze fraud risk signals from various data sources (e.g., device telemetry, behavioral analytics).Optimize fraud orchestration tools, ensuring seamless data exchange between fraud platforms, identity verification providers, and risk engines.Cross-Team Collaboration
Partner with fraud operations, cybersecurity, product, and engineering teams to align security and fraud prevention strategies with business goals.Educate internal teams on emerging fraud threats, mitigation strategies, and cybersecurity best practices.Required Qualifications
7+ years of experience in cybersecurity, fraud prevention, identity security, or a related field.Deep expertise in fraud detection technologies, including fraud scoring engines, behavioral analytics, and identity verification tools.Strong knowledge of IAM, CIAM, and authentication protocols (OIDC, SAML, OAuth, FIDO).Hands-on experience with fraud risk decisioning platforms (e.g., ThreatMetrix, Socure, Ekata, TransUnion, Kount, Sift).Experience in risk-based authentication (RBA) and adaptive fraud prevention strategies.Familiarity with bot mitigation, credential stuffing prevention, and ATO detection techniques.Proficiency in scripting and automation (Python, JavaScript, APIs) for fraud data processing.Strong understanding of regulatory compliance requirements (NIST 800-63, PSD2, GDPR, CCPA).Preferred Qualifications
Experience in AI/ML-based fraud detection techniques and behavioral biometrics.Knowledge of device intelligence and passive fraud detection methodologies.Prior experience in e-commerce, financial services, retail, or large-scale consumer identity security.Certifications such as CISSP, CFE (Certified Fraud Examiner), CISM, or CEH are a plus.Protecting what matters most to our associates and consumers by securing our sensitive data and critical assets from current and emerging threats. At The home Depot, Cybersecurity consists of Architecture, Governance, Identity & Access Management, Internal Threat Operations, Issue and Compliance Management, Risk Assessment/Advisory, Security Consulting, Security Operations, Service Optimization and Strategic Planning.
Key Responsibilities:
Direct Manager/Direct Reports:
Travel Requirements:
Physical Requirements:
Working Conditions:
Minimum Qualifications:
Minimum Education:
Minimum Years of Work Experience:
Competencies: