Cyber Fraud Investigator / Security Engineer

Cyber Fraud Investigator / Security Engineer - 100% Remote (Contract**)

Optomi, in partnership with a leading national healthcare organization, is seeking a Cyber Fraud Investigator / Security Engineer to join a team focused on identifying and combating sophisticated cyber-enabled fraud. This role sits at the intersection of cybersecurity, fraud investigation, identity security, and threat analysis. The team is currently focused on securing digital access portals and investigating activity involving account takeover, provider impersonation, fraudulent account creation, and other forms of identity-based abuse.

The ideal candidate is naturally investigative and enjoys digging beyond the initial alert to understand the full scope of suspicious activity, uncover related accounts or behaviors, and determine how fraud is occurring and how it can be prevented.

The Right Person

This team is looking for someone who is curious, persistent, and naturally investigative. Success in this role requires someone who continuously asks what else may be connected to an incident, looks beyond the obvious explanation, and enjoys uncovering patterns that others may have missed.

What You’ll Be Doing

• Investigate cyber-enabled fraud involving account takeover, identity impersonation, fraudulent registrations, and suspicious portal activity
• Analyze authentication, account, access, and behavioral data to identify patterns and connections
• Use Splunk and other data sources to investigate suspicious activity and correlate events across systems
• Identify relationships between accounts, identities, devices, IP addresses, access patterns, and other indicators
• Investigate potentially coordinated or large-scale fraudulent activity
• Partner with cybersecurity, fraud, legal, and business teams to understand and remediate emerging threats
• Help identify weaknesses within registration, authentication, account access, and identity-verification processes
• Recommend controls and investigative approaches that reduce future fraudulent activity
• Support efforts to secure high-volume digital access portals

What We’re Looking For

• Hands-on experience investigating cyber fraud, cybercrime, account takeover, identity fraud, digital abuse, or similar threats
• Strong investigative mindset with the ability to follow evidence beyond the initial alert or incident
• Experience using Splunk to search, analyze, and correlate security or fraud-related data
• Understanding of authentication, identity, account access, and common methods used by threat actors to compromise or impersonate legitimate users
• Ability to analyze large amounts of activity and identify behavioral patterns, anomalies, and relationships
• Strong communication skills and the ability to clearly explain investigative findings

Highly Preferred

• Healthcare fraud or healthcare cybersecurity experience
• Provider, claims, member, pharmacy, or insurance fraud investigation experience
• Experience investigating fraudulent account registration or provider/member impersonation
• Experience with identity platforms such as PingOne, Okta, Microsoft Entra ID, or similar technologies
• Adobe Customer Journey Analytics or similar behavioral/customer journey analytics tools
• Experience working alongside Special Investigations Units (SIU), fraud teams, threat intelligence, incident response, or law enforcement
• Familiarity with Microsoft Purview or E-Discovery processes

**This is a full-time (40 hours per week), long-term, contract opportunity with potential for future conversion. Candidates will work on W2 and still have access to benefits like medical, dental and 401K during the contract duration.