Data Scientist

Group-IB; Amsterdam; On-site; EUR 90,000 - 120,000; Full time

Job summary

Group-IB in Amsterdam seeks an experienced fraud analytics engineer to build end-to-end analytical services and production-grade Python solutions. You will develop ETL pipelines, fraud detection logic, and predictive modeling across diverse web entities, leveraging session and network data.

The role emphasizes research, machine learning integration, and scalable AI agents, with an emphasis on Elasticsearch/Cassandra/ClickHouse familiarity and a strong data-analysis background.

Qualifications

• Strong background in tabular data analysis and data modelling.
• Production-grade asynchronous Python coding (Python 3.10+).
• Experience with pandas and scikit-learn for data analysis and ML.
• Proficiency with Git; Docker experience is a plus.
• Proficient in IDE and terminal-based development.
• Experience building ETL pipelines for large datasets.
• Experience orchestrating AI coding agents efficiently.
• Research oriented mindset for fraud and anomaly detection.
• Familiarity with Elasticsearch, Cassandra or ClickHouse databases.

Responsibilities

• Execute data collection and analysis from disparate sources to establish and maintain robust ETL pipelines.
• Perform advanced research into fraud mitigation and anomaly detection in transactional and sessional data environments.
• Develop and integrate machine learning models and mathematical algorithms into the Fraud Protection ecosystem.
• Engineer and validate AI Agents tailored for complex analytical operations.
• Analyze session and network data to develop sophisticated fraud detection logic.
• Implement predictive modeling and scoring methodologies across diverse web entities.
• Synthesize research findings into comprehensive documentation and formal presentations.

Skills

Tabular data analysis

Asynchronous Python (3.10+)

Python data analysis (pandas, scikit‑"

Git

Docker

ETL pipelines

AI agents orchestration

Research mindset

Elasticsearch

Cassandra

ClickHouse

Tools

Elasticsearch

Cassandra

ClickHouse

Job description

Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations.

Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.

About The Role

In this role, you will be instrumental in the engineering and end-to-end development of analytical services designed to provide advanced fraud intelligence. You will leverage your experience in production-grade Python development to enhance our strategic fraud detection capabilities through the analysis of session and network data, development of sophisticated fraud detection logic, and implementation of predictive modeling and scoring methodologies across diverse web entities.

YOUR MISSION

• Execute data collection and analysis from disparate sources to establish and maintain robust ETL pipelines.
• Perform advanced research into methodologies for fraud mitigation and anomaly detection within transactional and sessional data environments.
• Develop and integrate machine learning models and mathematical algorithms into the Fraud Protection ecosystem.
• Engineer and validate AI Agents tailored for complex analytical operations.
• Analyze session and network data to develop sophisticated fraud detection logic.
• Implement predictive modeling and scoring methodologies across diverse web entities.
• Synthesize research findings into comprehensive documentation and formal presentations.

What We Are Looking For

• Strong foundation in tabular data analysis.
• Experience writing production-ready, asynchronous Python code (Python 3.10+).
• Experience with Python data analysis and machine learning libraries, including pandas and scikit-learn.
• Proficiency with Git; experience with Docker is a plus.
• Proficiency in IDE and terminal-based development.
• Experience building ETL pipelines.
• Experience orchestrating AI coding agents efficiently.
• Research-oriented mindset.
• Database experience with Elasticsearch, Cassandra, or ClickHouse is highly preferred.

What Sets You Apart

• Prior experience within the cybersecurity or anti-fraud sectors.
• Experience implementing AI agents end-to-end.
• Strong documentation and presentation skills.
• Experience working with Elasticsearch, Cassandra, or ClickHouse.
• Good understanding of how modern Internet entities (IPs, hostings, VPNs, etc.) are used from user's/malfactor’s point of view

WHY CHOOSE GROUP-IB

Group-IB is a global leader in cybersecurity technologies that investigate, predict, prevent, and fight digital crime. We help organizations reduce risk and protect trust. Trusted by governments, major industries, and law enforcement, we deliver adversary-focused, predictive threat intelligence and cyber fraud fusion solutions that detect, analyse, and mitigate regional and country-specific digital crimes.

• Work with real stakes. Group-IB investigates active cybercriminal groups, responds to breaches affecting critical infrastructure, and develops technologies used by law enforcement agencies including INTERPOL, Europol, and Afripol across 60+ countries. We've conducted 1,550+ cybercrime investigations alongside 600+ enterprise customers globally. When you join Group-IB, your work directly disrupts digital crime.
• Grow your way. Choose your own path: deepen your craft as a technical expert, step into leadership, move across to another team, or relocate to one of our Digital Crime Resistance Centers across the Americas, Europe, the Middle East & Africa, Central Asia, and the Asia-Pacific. Your growth is our growth — Group-IB's expansion across 60+ active country operations means real career acceleration.
• We fund professional certifications at company expense — whether you're pursuing CEH, CISSP, OSCP, or specialized certifications in forensics and penetration testing. You don't have to choose between doing the job and advancing your credentials.
• Work alongside industry leaders. Our Unified Risk Platform — Threat Intelligence, Digital Risk Protection, Attack Surface Management, Managed XDR, and more — is recognized by Gartner, Forrester, KuppingerCole, and Datos Insights. Frost & Sullivan named us a 2025 Global Technology Innovation Leader. When you work here, you're building technologies that set the industry standard.
• Real challenges, real expertise. You'll take on complex, real-world problems alongside adversary-centric researchers and incident response experts spread across six continents. We've built 21+ years of proprietary telemetry through 1,500+ joint investigations. No two threats look alike — and neither do the skills you'll develop.
• A team that is genuinely international. Our people come from different countries, speak different languages, and bring different perspectives. What connects us is a shared mission: fighting cybercrime and making the world safer. We care about your wellbeing and happiness as much as your output.