Fraud Team Lead - Cyber Security

The role

We are seeking an experienced Fraud Team Lead to join the Cyber Security organization, reporting to the Head of Detection & Response under the CISO.This role is responsible for leading the organization's Fraud & Insider Threat function, protecting Nebius, its employees, executives, customers, and brand from fraud-driven attacks and insider risks.You will lead a team responsible for identifying, investigating, and responding to fraud campaigns targeting the organization, including Business Email Compromise (BEC), executive impersonation, phishing, social media fraud, account takeovers, financial fraud, and insider threats. The role requires close collaboration with SOC, Threat Intelligence, IT, HR, Legal, Communications, and business stakeholders to proactively reduce fraud risk and strengthen organizational resilience.

Your responsibilities will include:

• Lead and manage the Fraud & Insider Threat team, including mentoring, prioritization, and professional development. 
• Define and execute the organization's fraud prevention and insider threat strategy, processes, and operational playbooks. 
• Oversee investigations involving Business Email Compromise (BEC), executive impersonation, phishing campaigns, social engineering, financial fraud, and insider threat activities. 
• Lead monitoring and response efforts for fraud targeting executives, employees, customers, and the Nebius brand. 
• Investigate fraudulent domains, social media impersonation, fake websites, fraudulent mobile applications, and other brand abuse activities. 
• Coordinate takedown efforts with external providers, registrars, social media platforms, and law enforcement when required. 
• Develop fraud detection capabilities by leveraging threat intelligence, telemetry, and fraud monitoring tools. 
• Collaborate with SOC and Threat Intelligence teams to identify emerging fraud campaigns and evolving attacker techniques. 
• Partner with HR, Legal, Finance, Communications, and IT teams to investigate insider threats and fraud incidents while ensuring appropriate handling and confidentiality. 
• Produce intelligence reports, risk assessments, and executive briefings on fraud trends, insider threats, and organizational exposure. 
• Define KPIs and continuously improve fraud detection, investigation, and response processes. 
• Drive awareness programs to educate employees and executives on phishing, social engineering, executive fraud, and insider threat risks.

We expect you to have:

• 5+ years of experience in cyber security, fraud investigations, digital investigations, cyber intelligence, or incident response. 
• 2+ years of experience leading technical or investigative teams. 
• Strong understanding of Business Email Compromise (BEC), phishing, executive impersonation, social engineering, and financial fraud techniques. 
• Experience investigating cyber-enabled fraud, insider threats, and digital abuse incidents. 
• Familiarity with email security, identity systems, and enterprise collaboration platforms. 
• Experience working with threat intelligence, OSINT, and digital investigation tools. 
• Strong analytical, investigative, and problem-solving skills. 
• Experience working cross-functionally with Security, HR, Legal, Finance, IT, and executive leadership. 
• Excellent written and verbal communication skills in Hebrew and English.

It will be an added bonus if you have:

• Experience with brand protection, digital risk protection (DRP), or external attack surface monitoring platforms. 
• Familiarity with dark web monitoring, OSINT investigations, and threat intelligence platforms. 
• Experience working with law enforcement or external fraud investigation organizations. 
• Knowledge of insider threat methodologies and user behavior analytics (UBA/UEBA). 
• Experience in SaaS, cloud-native, or enterprise environments. 
• Relevant certifications such as CFE (Certified Fraud Examiner), GCFA, GCTI, CISSP, or equivalent. 
• BSc in Computer Science, Information Security, Criminology, Intelligence, or a related field.