Senior Security Analyst – Fraud

Description
At Bath & Body Works, everyone belongs. We are committed to creating a culture of belonging focused on delivering exceptional fragrances and experiences to our customers. We focus on recruiting, retaining, and advancing top talent. In addition, we work to improve our communities and our planet to help the world live more fully.

Title: Senior Security Analyst – Fraud & Abuse
Cyber Security sits within the Information Technology team as an integral part of the Bath & Body Works business. As an individual contributor focused on the intersection between fraud and security, you will form an end-to-end perspective of fraudulent activity across the enterprise. This will allow you to monitor daily operations, deliver extensive attack/response playbooks, propose policy or security changes, and monitor the effectiveness of fraud prevention solutions. You will work extensively with internal and external business and technology partners from entry-level to senior executives in all areas of the business. If you love tackling challenges, helping grow programs, and fostering collaboration, this is the role for you.

Responsibilities

• Develop and maintain Fraud Investigation policies and response/attack playbooks
• Research novel industry fraud attacks and perform root cause investigation on emerging attacks
• Join data from different sources to investigate and scope at scale
• Author detection capabilities that allow the business to prevent revenue loss due to fraud
• Foresee the fraud risks associated with policy, process, or tool changes
• Monitor and investigate active fraud vectors
• Propose security changes for the purpose of preventing fraud

Qualifications

• 7-10 years of experience in a fast-paced e-commerce fraud or security role
• Comfortable using SQL/KQL to manipulate large data sets from multiple sources
• Proven results using data to tell stories that compel change
• Ability to ensure operational integrity and operate within business SLAs
• Deep knowledge of human behavior as it relates to behavior modification and operating steps ahead of attackers
• Hands-on experience with proxy and testing tools such as Burp Suite (or similar application security testing tools) and Postman (or similar API testing tools) to inspect, modify, and replay HTTP/S requests, and analyze network traffic, specifically for the purpose of identifying fraud vectors and abuse.

Nice to have:

• Ability to document and reproduce end-to-end attacks
• Experience with Python, PowerBI, or other data analysis tools
• CFE, GWAPT, GWEB, ASCP, C-APIPen, AML, ISO 31000, or other certifications related to financial fraud, security, or risk management
• Investigation exposure including but not limited to:
• API abuse, Loyalty abuse, promotional abuse, account takeover, gift card fraud, unauthorized reseller/re-shipper, supply chain fraud, refund fraud, customer support policy abuse, synthetic accounts, social media-driven attacks, bot attacks

Education

• Bachelors degree or equivalent experience

Salary Range: 120k -140k + Company Bonus
Core Competencies

• Lead with Curiosity & Humility
• Build High Performing Teams for Today & Tomorrow
• Influence & Inspire with Vision & Purpose
• Observe, Engage & Connect
• Strive to Achieve Operational Excellence
• Deliver Business Results

Benefits
Bath & Body Works associates are the heart of our business. That's why we're proud to offer benefits that empower you to Dream Bigger & Live Brighter. Benefits for eligible associates include:

• Robust medical, pharmacy, dental and vision coverage. Plus, access to our onsite wellness center and pharmacy located at the Columbus, OH home office.
• 401k with company match and Associate Stock Purchase with discount
• No-cost mental health and wellbeing support through our Employee Assistance Program (EAP)
• Opportunity for paid time off and paid parental leave. Plus, access to family and lifestyle programs including a family building benefit, childcare discounts, and home, auto and pet insurance.
• Tuition reimbursement and scholarship opportunities for post-secondary education programs
• 40% merchandise discount and gratis that encourages you to come back to your senses

Visit for more details.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required.

We will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws. Please see links: Los Angeles Fair Chance In Hiring Ordinance, Philadelphia Fair Chance Law, San Francisco Fair Chance Ordinance.

We are an equal opportunity action employer. We do not make employment decisions based on an individual's race, color, religion, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, marital status, pregnancy, genetic information, protected veteran status or any other legally protected status, and we comply with all laws concerning nondiscriminatory employment practices. We are committed to providing reasonable accommodations for associates and job applicants with disabilities. Our management team is dedicated to ensuring fulfillment of this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, associate activities and general treatment during employment. We only hire individuals authorized for employment in the United States.

Application window will close when all role(s) are filled.

Category: Information Technology