Engineer IV - Fraud Intelligence

Opportunity Overview

Team Mission:
The Fraud Intelligence team's mission is to deliver accurate, timely, and actionable intelligence to help the organization identify, protect, detect, respond to, and proactively prevent fraud threats. We focus on cyber-enabled fraud and emerging attack vectors, providing insights that strengthen defenses and inform strategic decisions.
What the Fraud Intelligence Team Does:

• Threat Monitoring & Analysis: Track fraud trends, threat actor tactics, techniques, and procedures (TTPs), and indicators of compromise (IOCs).
• Data-Driven Insights: Collect and analyze data from multiple sources to identify patterns, vulnerabilities, and potential fraud risks.
• External Collaboration: Engage with law enforcement and industry groups (e.g., NCFTA, FS-ISAC) to share intelligence and stay ahead of evolving threats.
• Proactive Defense: Work with detection engineers to build fraud-related analytics and use cases that enhance prevention capabilities.
• Reporting & Communication: Produce clear, concise reports and disseminate intelligence to leadership and stakeholders for informed decision-making.

Key Responsibilities:

• Research and analyze cyber fraud attack types (e.g., Account Takeover, new account fraud, credential stuffing, brute force, bot-driven attacks).
• Monitor fraud intelligence feeds, escalate alerts, and share information through approved channels.
• Conduct in-depth analysis of phishing trends, phishing kits, brand impersonation, compromised credentials/devices, and attacks targeting client portals.
• Profile threat actors and track fraud-related TTPs using frameworks like MITRE ATT&CK.
• Collect and present metrics, ensuring timely dissemination of actionable insights.
• Identify new data requirements (feeds, logs, APIs) and assist in automation of fraud intel processes.
• Manage vendor fraud alerts and collaborate on detection engineering for fraud analytics.

EEO Statement

Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law.

Company Description

Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500¹ company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns.

Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging.

People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career.

View our Purpose, Inclusion and Citizenship Report.

¹Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating.

Awards and Accolades

At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received.

Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones

Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones

Position Requirements

Qualifications:
Required:

• 5+ years in cybersecurity or fraud intelligence.
• Strong understanding of threat actors, TTPs, and threat intelligence lifecycle.
• Experience with data integration (feeds, APIs) and report writing for senior leadership.
• Analytical mindset with strong attention to detail and critical thinking skills.
• Ability to work independently and as part of a team in a fast-paced environment.

Preferred:

• Familiarity with Oracle and SQL for data mining and analysis (or willingness to learn).
• Experience creating cyber fraud detections.

Current INTERNAL home-based associates: While this role is posted as hybrid, if selected and accepted, you may retain your home-based status . Edward Jones intends in good faith to continue offering the role as home-based, though future business or regulatory needs may require on-site work.

**Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday.**

Salary Information

Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page.