Cyber Fraud Senior Analyst in Edinburgh

Discover a career in your hands at HMRC. Whether you're seeking purpose, growth, or a workplace that gives you a true sense of belonging, hear from some of our employees as they share their story about what it’s really like to work at HMRC.

The Fraud Prevention Centre (FPC) is a strategic capability within HMRC Security, designed to safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver a holistic approach to fraud prevention. Our team is rapidly growing as we invest in new technologies and capabilities, and we are in search of enthusiastic individuals who can help us in achieving our mission.

As a Cyber Fraud Senior Analyst, you will play a key role in identifying, investigating, and mitigating identity related and cyber enabled fraud impacting HMRC services. Working within the FPC, the role blends cyber security, data analytics, and operational fraud response, combining advanced analytical techniques and threat based thinking, to protect customers and HMRC from emerging threats.

A Cyber Fraud Senior Analyst is responsible for detecting, analysing, and responding to cyber enabled and identity related fraud affecting HMRC’s digital services. This role is critical in enabling HMRC to stay ahead of adversaries. You act as both a technical specialist and an operational decision maker—identifying suspicious activity, supporting investigations, guiding interventions, and improving HMRC's fraud detection capabilities.

Person specification

• Data Analysis & Tool Development: Innovate with new tools and techniques to enhance data analysis capabilities. Detect suspicious identity-related activity using methods like data mining, data matching, clustering, and outlier detection. You will also use your experience of scripting, to proactively search and discover anomalies.
• Investigation: Investigate anomalies and suspicious activity, applying intelligence-led approaches to disrupt fraudulent behaviour.
• Case Management: Lead and advise on complex and sensitive fraud investigations. Be the escalation point for high-impact or difficult data analysis cases.
• Innovation: Support innovation and continuous improvement in fraud prevention techniques, leveraging automation, anomaly detection, and advanced analytics to stay ahead of evolving threats, and ensure a prompt and effective response.
• Team Development: Provide day-to-day guidance and mentorship to junior analysts, supporting their development, guiding fraud detection techniques, and ensuring high standards of analytical rigour and teamwork across the function.
• Strategic Reporting & Leadership: Support and deputise for the G7 Cyber Customer Operations Lead by producing clear, insightful reports and presentations for senior stakeholders, translating technical findings into business-relevant insights.
• Cross-functional Collaboration: Act as the key liaison across multiple Fraud Prevention Centre and HMRC teams, contributing to planning by interpreting the broader fraud threat landscape.
• Adaptability: Embrace ambiguity in this evolving role, contributing flexibly as the team grows and responsibilities expand.

Essential Criteria

• Proven experience in fraud detection, cyber security, or threat intelligence within a large organisation.
• Knowledge of fraud detection techniques, including behavioural analysis and anomaly detection and investigation and OSINT (Intelligence) methods.
• Data analysis skills and experience with large data sets, with proficiency software development and scripting complex queries in analysis environments.
• Solid technical understanding of web and API services (e.g. cookies, IP addresses, authentication processes) and threats to those services from cybercrime actors and tools.
• A degree in Data Analysis, Data Science, Information Security, Cyber Security, or at least previous experience in a relevant cyber role.
• Experience using Security Information and Event Management (SIEM) platforms, preferably in a security operations setting.
• A sound understanding of Identity, Verification and Authentication principles.

Desirable Criteria

• Strong communicator across both technical and business domains, with the ability to influence and mentor team members and stakeholders.
• Skilled in reporting, presenting, and visualising complex data in creative, digestible formats.
• Technical understanding of web services (e.g. cookies, IP addresses, authentication processes) and experience using SIEM platforms such as Splunk.
• Scripting skills (e.g., Excel functions) and awareness of fraud risks in digital services.

Benefits

• Alongside your salary of 45,544, HM Revenue and Customs contributes 13,194 towards you being a member of the Civil Service Defined Benefit Pension scheme.
• HMRC operates both Flexible and Hybrid Working policies, allowing you to balance your work and personal commitments.
• We offer a generous leave allowance, starting at 25 days and increasing by a day for every year of qualifying service up to a maximum of 30 days.
• Pension - We make contributions to our colleagues’ Alpha pension equal to at least 28.97% of their salary.
• Family friendly policies.
• Personal support.
• Coaching and development.