Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations.
Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.
ABOUT THE ROLE
We are looking for an experienced Machine Learning Engineer (Middle+/Senior) to strengthen our Fraud Protection team within a multinational cybersecurity company. The primary mission of this role is to analyze banking transactions to detect and prevent fraud and to enhance existing fraud detection algorithms.
A key focus of the position is graph-based transactional analysis, including identifying complex relationships in financial data such as cryptocurrency flows. You may also contribute to broader graph-related tasks, for example building GraphRAG components for AI-driven agents.
YOUR MISSION
- Identify and formalize scenarios to be covered by the transactional antifraud system, especially in the AML domain.
- Conduct research on cutting-edge ML models and techniques for fraud and anomaly detection in transactional data.
- Build ML models (classic, graph-based, neural networks) and integrate them into the Fraud Protection platform.
- Develop production-ready source code (primarily in Python; Go experience is a plus).
- Document and present research findings.
Tech Stack
- Python 3.8+
- Data analysis & modeling: pandas, scikit-learn, PyTorch
- Graph libraries/frameworks: NetworkX, PyG, Neo4j, AWS Neptune (any of these)
- Databases (nice to have): Elasticsearch, Cassandra, ClickHouse
- Git, Docker
- AWS ecosystem
WHAT WE ARE LOOKING FOR
- Have a solid foundation in transactional data analysis.
- Understand neural networks (CNNs, RNNs, etc.), classical ML algorithms, and where to apply them—especially Graph ML (node embeddings, link prediction, GNNs).
- Have hands-on experience with frameworks such as PyTorch or Keras/TensorFlow.
- Are proficient in both IDE-based and terminal-based development.
- Have experience designing and building ETL pipelines.
- Have a research-oriented mindset and enjoy experimentation.
WHAT SETS YOU APART
- Strong documentation and presentation skills.
- Experience with MLOps practices.
- Experience writing production-ready asynchronous Python code.
WHY CHOOSE GROUP-IB
Group-IB is a global leader in cybersecurity technologies that investigate, predict, prevent, and fight digital crime. We help organizations reduce risk and protect trust. Trusted by governments, major industries, and law enforcement, we deliver adversary-focused, predictive threat intelligence and cyber fraud fusion solutions that detect, analyse, and mitigate regional and country-specific digital crimes.
- Work with real stakes. Group-IB investigates active cybercriminal groups, responds to breaches affecting critical infrastructure, and develops technologies used by law enforcement agencies including INTERPOL, Europol, and Afripol across 60+ countries. We've conducted 1,550+ cybercrime investigations alongside 600+ enterprise customers globally. When you join Group-IB, your work directly disrupts digital crime.
- Grow your way. Choose your own path: deepen your craft as a technical expert, step into leadership, move across to another team, or relocate to one of our Digital Crime Resistance Centers across the Americas, Europe, the Middle East & Africa, Central Asia, and the Asia-Pacific. Your growth is our growth — Group-IB's expansion across 60+ active country operations means real career acceleration.
- We fund professional certifications at company expense — whether you're pursuing CEH, CISSP, OSCP, or specialized certifications in forensics and penetration testing. You don't have to choose between doing the job and advancing your credentials.
- Work alongside industry leaders. Our Unified Risk Platform — Threat Intelligence, Digital Risk Protection, Attack Surface Management, Managed XDR, and more — is recognized by Gartner, Forrester, KuppingerCole, and Datos Insights. Frost & Sullivan named us a 2025 Global Technology Innovation Leader. When you work here, you're building technologies that set the industry standard.
- Real challenges, real expertise. You'll take on complex, real-world problems alongside adversary-centric researchers and incident response experts spread across six continents. We've built 21+ years of proprietary telemetry through 1,500+ joint investigations. No two threats look alike — and neither do the skills you'll develop.
- A team that is genuinely international. Our people come from different countries, speak different languages, and bring different perspectives. What connects us is a shared mission: fighting cybercrime and making the world safer. We care about your wellbeing and happiness as much as your output.
Skills Required
- Solid foundation in transactional data analysis
- Understanding of neural networks, classical ML, and Graph ML (node embeddings, link prediction, GNNs)
- Hands-on experience with PyTorch or Keras/TensorFlow
- Production-ready Python development (Python 3.8+)
- Experience designing and building ETL pipelines
- Proficiency with pandas and scikit-learn for data analysis and modeling
- Experience with graph libraries/frameworks (NetworkX, PyG) and graph databases (Neo4j, AWS Neptune)
- Familiarity with Git, Docker, and AWS ecosystem
- Go experience
- Experience with Elasticsearch, Cassandra, ClickHouse
- Research-oriented mindset and ability to document and present findings
- Experience with MLOps practices
- Experience writing production-ready asynchronous Python code
- Proficient in both IDE-based and terminal-based development
What We Do
Established in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies dedicated to investigating, preventing, and fighting digital crime globally. The company provides high-fidelity adversary tracking, threat detection, and online fraud prevention solutions to protect businesses and citizens while supporting international law enforcement agencies like INTERPOL and Europol in creating a safer cyberspace.
