1

Mobile Forensics Jobs in Utah (NOW HIRING)

Fraud Strategist - Login and Auth

Cottonwood Heights, UT ยท On-site

$115K - $149K/yr

We're a next-generation financial services company and national bank using innovative, mobile-first ... Driving device forensics at depth: device fingerprinting, emulator and VM detection, jailbreak and ...

Familiarity with unmanned aerial vehicles and associated mobile and wireless technologies ... Experience employing advanced forensic tools and techniques for attack reconstruction, including ...

Fraud Strategist - Ecosystem

Cottonwood Heights, UT ยท On-site

$115K - $149K/yr

We're a next-generation financial services company and national bank using innovative, mobile-first ... The work requires fluency in device forensics, entity resolution, account takeover (ATO) defense ...

Well-versed in forensic schedule analysis and schedule impact exhibit creation to champion the ... If you feel you would be the right fit, please fill out our initial 3-minute, mobile-friendly ...

Well-versed in forensic schedule analysis and schedule impact exhibit creation to champion the ... If you feel you would be the right fit, please fill out our initial 3-minute, mobile-friendly ...

Senior Construction Scheduler

Vernal, UT ยท On-site

$140K - $175K/yr

Well-versed in forensic schedule analysis and schedule impact exhibit creation to champion the ... If you feel you would be the right fit, please fill out our initial 3-minute, mobile-friendly ...

Well-versed in forensic schedule analysis and schedule impact exhibit creation to champion the ... If you feel you would be the right fit, please fill out our initial 3-minute, mobile-friendly ...

Senior Construction Scheduler

Vernal, UT ยท On-site

$140K - $175K/yr

Well-versed in forensic schedule analysis and schedule impact exhibit creation to champion the ... If you feel you would be the right fit, please fill out our initial 3-minute, mobile-friendly ...

Well-versed in forensic schedule analysis and schedule impact exhibit creation to champion the ... If you feel you would be the right fit, please fill out our initial 3-minute, mobile-friendly ...

Cyber Defense Analyst

Clearfield, UT ยท On-site

$101K - $121K/yr

Familiarity with endpoint detection and response (EDR) tools and host-based forensics ... Company Overview Persistent Systems is a growing business that develops Mobile Ad hoc Networking ...

Cyber Defense Analyst

Clearfield, UT ยท On-site

$101K - $121K/yr

Familiarity with endpoint detection and response (EDR) tools and host-based forensics ... Company Overview Persistent Systems is a growing business that develops Mobile Ad hoc Networking ...

Mobile Forensics information

What is the difference between Mobile Forensics vs Digital Forensics?

AspectMobile ForensicsDigital Forensics
CertificationsCertified Mobile Forensics Examiner (CMFE), EnCEGCFA, GCFE, EnCE
Work EnvironmentLaw enforcement, private labs, corporate securityLaw enforcement, legal firms, corporate security
Industry UsageFocuses on mobile devices like smartphones and tabletsEncompasses all digital devices including computers, servers, and mobile devices

Mobile Forensics is a specialized subset of Digital Forensics that concentrates on extracting and analyzing data from mobile devices. While both fields require similar certifications and often operate in similar environments, Mobile Forensics specifically deals with smartphones and tablets, whereas Digital Forensics covers a broader range of digital devices. Understanding these differences helps professionals choose the right career path or specialization.

What is mobile forensics?

Mobile forensics is the science of recovering, analyzing, and preserving digital evidence from mobile devices such as smartphones and tablets. It involves extracting data like messages, call logs, photos, and app data in a way that maintains its integrity for use in investigations or legal proceedings. Mobile forensics experts use specialized tools and techniques to access both visible and deleted information, often working with law enforcement or private organizations to uncover evidence relevant to criminal or civil cases.

What are some of the common challenges faced by professionals in mobile forensics, and how can they be addressed?

Mobile forensics specialists often encounter challenges such as rapidly evolving device encryption, diverse operating systems, and frequent software updates that can hinder data extraction. Addressing these challenges requires continuous learning and staying up to date with the latest forensic tools and techniques. Collaboration with law enforcement, legal teams, and IT departments is also essential to ensure evidence integrity and proper case handling. Building a network of industry contacts and participating in professional training can help overcome technical obstacles and keep your skills current.

What are the key skills and qualifications needed to thrive as a mobile forensics specialist, and why are they important?

To thrive as a Mobile Forensics Specialist, you need expertise in digital evidence collection, data analysis, and understanding of mobile operating systems, often supported by a degree in computer science or cybersecurity. Familiarity with forensic tools such as Cellebrite, Oxygen Forensics, and certification like Certified Mobile Device Examiner (CMDE) is typically required. Attention to detail, problem-solving abilities, and strong written and verbal communication skills are crucial soft skills for success in this role. These competencies ensure accurate, legally defensible investigations and effective communication of findings to law enforcement or legal teams.
What are the most commonly searched types of Forensics jobs in Utah? The most popular types of Forensics jobs in Utah are:
What job categories do people searching Mobile Forensics jobs in Utah look for? The top searched job categories for Mobile Forensics jobs in Utah are:
What cities in Utah are hiring for Mobile Forensics jobs? Cities in Utah with the most Mobile Forensics job openings:
Infographic showing various Mobile Forensics job openings in Utah as of July 2026, with employment types broken down into 97% Full Time, 2% Part Time, and 1% Contract. Highlights an 93% Physical, 3% Hybrid, and 4% Remote job distribution.

Fraud Strategist - Login and Auth

SoFi

Cottonwood Heights, UT โ€ข On-site

$115K - $149K/yr

Full-time

Re-posted 5 days ago


Job description

Employee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we're changing the way people think about and interact with personal finance.
We're a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we're at the forefront. We're proud to come to work every day knowing that what we do has a direct impact on people's lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The Role:
We are searching for a Fraud Strategist, Login and Auth to own the perimeter of the SoFi platform. This is a sophisticated role at the intersection of adversarial threat intelligence, device forensics, and real-time decisioning. You will design fraud strategy across login, password reset, MFA, step-up, and high-risk session events, calibrated against the full spectrum of perimeter threats: account takeover (ATO), authorized scams, credential stuffing, MFA bombing, OTP interception, SIM swap, adversary-in-the-middle phishing, and emulator-driven bot traffic. The work requires fluency in device intelligence,, behavioral biometrics, network reputation, and the device-graph forensics needed to attribute risk to entities, not just sessions. You will work cross-functionally with EPD, IAM, Fraud Ops, InfoSec, and partner risk teams to translate signals into production policy that scales across Money, Invest, Crypto, Card, and Lending.
By joining SoFi, you'll become part of a forward-thinking company that is transforming financial services for the better. We offer the excitement of a rapidly growing startup with the stability of an industry leading leadership team.
What You'll Do:
The Fraud Strategist, Login and Auth will help SoFi build a defensible authentication perimeter by:
  • Owning the end-to-end login risk strategy across web and mobile authentication surfaces: signal selection, rule construction, threshold tuning, champion/challenger lifecycle, and rule-level loss attribution.
  • Architecting perimeter-threat defense covering ATO, scam interception (authorized push payment, remote access, impostor, investment), MFA bombing, OTP interception, SIM swap, and adversary-in-the-middle phishing. Translate live campaign telemetry into production rule changes within hours
  • Driving device forensics at depth: device fingerprinting, emulator and VM detection, jailbreak and root signals, residential-proxy detection, and entity-level device-graph analysis to surface coordinated abuse hidden under individually clean sessions.
  • Designing step-up authentication, account recovery, and high-risk transaction decisioning that synthesizes device, behavioral, network, and credential-risk signals into a single decision, with explicit FPR budgets per surface.
  • Leading 3DS, CNP, and tokenization risk decisioning for card-not-present transactions, coordinating with issuer processing and network rules to optimize approval rate without ceding losses.
  • Partnering with InfoSec threat intel on credential-capture campaigns (phishing kits, SEO poisoning, ATO-as-a-service marketplaces) and translating intelligence into rule changes inside the live policy stack.

What You'll Need:
  • BA/BS in Statistics, Information Systems, Mathematics, Data Science, or related fields, or equivalent work experience, and 5-8 years of work experience in Fraud Analytics, Authentication Risk, or Adversarial Security Engineering.
  • ATO and Scam Defense: Demonstrated track record reducing account takeover and scam losses across banking, card, and crypto surfaces. Comfort across the full kill chain: credential exposure, login compromise, in-session manipulation (remote access, screen share, social engineering), and money movement out.
  • Perimeter Threat Fluency: Operational understanding of credential stuffing, MFA bombing, OTP interception, SIM swap, adversary-in-the-middle phishing, residential-proxy abuse, and emulator-driven automation. You can recognize a campaign in flight from telemetry and respond at the policy layer.
  • Device Forensics: Hands-on experience with device fingerprinting, emulator and VM detection, jailbreak and root signals, behavioral biometrics, and entity-level device-graph analysis.
  • Authentication Stack Depth: Working knowledge of FIDO2/passkeys, OAuth/OIDC, 3DS protocol mechanics, tokenization, and the trade-offs between approval rate and chargeback exposure on CNP flows.
  • Balance Friction and Growth: Deep mastery of evaluating trade-offs between fraud mitigation and UX. You can articulate why a 50 bps lift in challenge rate is or is not worth the loss avoidance, with the data to back it.
  • Architect Scalable Data Systems: Expert-level SQL/Python skills used to build automated, high-volume data architectures and statistical models that serve as the foundation for global risk detection.
  • Drive Strategic Influence: A proactive operator who uses cross-functional persuasion to align EPD, IAM, InfoSec, and Fraud Ops on policy changes, and owns end-to-end execution in fluid environments.
  • Founders' Mentality: You need to have a positive, proactive attitude, being able to identify problems, raise proposals, and be an advocate of your initiatives. Learn, iterate, and excel.

Compensation and Benefits
The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate's experience, skills, and location.
To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!
SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.
The Company hires the best qualified candidate for the job, without regard to protected characteristics.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
New York applicants: Notice of Employee Rights
SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email accommodations@sofi.com.
Due to insurance coverage issues, we are unable to accommodate remote work from Hawaii or Alaska at this time.
Internal Employees
If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.