Fraud Team Lead (Cyber Security)

About Nebius:
Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.
Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.
The role
We are seeking an experienced Fraud Team Lead to join the Cyber Security organization, reporting to the Head of Detection & Response under the CISO.
This role is responsible for leading the organization's Fraud & Insider Threat function, protecting Nebius, its employees, executives, customers, and brand from fraud-driven attacks and insider risks.
You will lead a team responsible for identifying, investigating, and responding to fraud campaigns targeting the organization, including Business Email Compromise (BEC), executive impersonation, phishing, social media fraud, account takeovers, financial fraud, and insider threats. The role requires close collaboration with SOC, Threat Intelligence, IT, HR, Legal, Communications, and business stakeholders to proactively reduce fraud risk and strengthen organizational resilience.
Your responsibilities will include:
Lead and manage the Fraud & Insider Threat team, including mentoring, prioritization, and professional development.
Define and execute the organization's fraud prevention and insider threat strategy, processes, and operational playbooks.
Oversee investigations involving Business Email Compromise (BEC), executive impersonation, phishing campaigns, social engineering, financial fraud, and insider threat activities.
Lead monitoring and response efforts for fraud targeting executives, employees, customers, and the Nebius brand.
Investigate fraudulent domains, social media impersonation, fake websites, fraudulent mobile applications, and other brand abuse activities.
Coordinate takedown efforts with external providers, registrars, social media platforms, and law enforcement when required.
Develop fraud detection capabilities by leveraging threat intelligence, telemetry, and fraud monitoring tools.
Collaborate with SOC and Threat Intelligence teams to identify emerging fraud campaigns and evolving attacker techniques.
Partner with HR, Legal, Finance, Communications, and IT teams to investigate insider threats and fraud incidents while ensuring appropriate handling and confidentiality.
Produce intelligence reports, risk assessments, and executive briefings on fraud trends, insider threats, and organizational exposure.
Define KPIs and continuously improve fraud detection, investigation, and response processes.
Drive awareness programs to educate employees and executives on phishing, social engineering, executive fraud, and insider threat risks.
We expect you to have:
5+ years of experience in cyber security, fraud investigations, digital investigations, cyber intelligence, or incident response.
2+ years of experience leading technical or investigative teams.
Strong understanding of Business Email Compromise (BEC), phishing, executive impersonation, social engineering, and financial fraud techniques.
Experience investigating cyber-enabled fraud, insider threats, and digital abuse incidents.
Familiarity with email security, identity systems, and enterprise collaboration platforms.
Experience working with threat intelligence, OSINT, and digital investigation tools.
Strong analytical, investigative, and problem-solving skills.
Experience working cross-functionally with Security, HR, Legal, Finance, IT, and executive leadership.
Excellent written and verbal communication skills in Hebrew and English.
It will be an added bonus if you have:
Experience with brand protection, digital risk protection (DRP), or external attack surface monitoring platforms.
Familiarity with dark web monitoring, OSINT investigations, and threat intelligence platforms.