Data Analyst, Antifraud
Almaty, KazakhstanFull-timePosted 3w ago
About the role
Data Analyst role focused on investigating and quantifying antifraud costs and patterns to identify abusive behavior and justify enforcement actions, with a data-driven approach using SQL, Python, and BigQuery.
Responsibilities
- Run ring investigations end to end: from a flagged account or a cost anomaly to a named cluster, its members, its signature, its lifetime economics and a recommended action.
- Build the linkage yourself — shared payment instruments, IP and ASN concentration, email-stem families, registration bursts, behavioural and automation fingerprints — and know which links are evidence and which are coincidence.
- Separate abuse from unprofitable-but-legitimate every single time. On an unlimited plan, negative gross margin is normal. Cost is a gate, never a trigger.
- Triage the review queue the detection system produces, and feed what you learn back into it. Your adjudications are the only unbiased labels the scientist has.
- Produce evidence packages that hold up outside the company — to an external auditor, to a payment network, to a customer disputing a ban, to Legal enforcing our Terms.
- Write per-account, not per-ring, when the action is per-account. A ban list without a reason column is not evidence.
- Know what our Terms of Use actually entitle us to do, and flag when the evidence supports the finding but not the action.
- Own the abuse loss number: what it cost, on what basis, net of the revenue we reversed and the legitimate customers we caught by mistake.
- Distinguish COGS burned, revenue at risk, revenue reversed and cash refunded — they are four different numbers and people will conflate them.
- Build the recurring reporting that tells us whether the problem is growing, and the ad-hoc answer to "why did compute spike last Tuesday" that is due the same day.
- Watch the detectors themselves. A rule that stops firing is a detection event, not a quiet week.
- Check the instrument before explaining the movement: a missing upstream table, a silently dropped join, a vendor signal that went away.
- Spot new abuse patterns before they are in anybody's model — usually in a cost anomaly, a strange cohort, or a support ticket that does not fit.
Qualifications
- 2+ years doing investigative or risk analytics — fraud, abuse, trust and safety, AML, chargebacks, gaming or marketplace integrity.
- Strong SQL, without help. Self-joins, window functions, cohort replay, and joining payments to usage to identity across messy keys.
- Python at working level for analysis — pandas, notebooks, a bit of graph work.
- Investigative instinct: you follow the thread, you notice the thing that does not fit, and you can say when a pattern is a coincidence.
- Evidentiary discipline: you can write up a finding so that somebody who distrusts you can check it, and you know the difference between "this looks like abuse" and "this is provable."
- Unit-economics literacy: gross margin per account, what compute costs, and why a negative-margin customer may be entirely legitimate.
- The judgment to escalate rather than act when the evidence is thin, and to say so in writing.
- Clear written and spoken English, B2+.
- Backgrounds that often do well: Fraud / risk analysts from fintech, payments, marketplaces, gaming, crypto or betting; Trust & safety investigators and platform-integrity analysts; Chargeback, dispute or AML analysts who write their own queries; Strong product or BI analysts who got handed the abuse problem and kept it
Skills
Required:SQLPythonInvestigative instinctEvidentiary disciplineEnglish communication
Benefits
- Competitive salary in USD
- Equity: participation in the company's stock option program
- On-site role in Almaty, Kazakhstan
- Relocation support (flight + temporary housing)
- Flat structure, high autonomy, fast career growth
Last updated Oct 25, 2026. Interested? Apply on the company site.
About Higgsfield AI
Higgsfield AI — AI-native creative suite
Create images, videos, and voice content with Higgsfield AI from text prompts or references. Edit and upscale media, automate creative workflows with its AI agent, and generate content on web and mobile.
AI-native creative suiteAppsSeedanceSeedreamMCP & CLIGemini Omni FlashCinema StudioOriginal Series
More open roles at Higgsfield AI
- Member of Technical Staff, ML Security2d agoHybrid (San Francisco Bay Area, USA) · Product Engineering
- Product Manager (Product Growth)2d agoAlmaty, Kazakhstan · Product Growth
- Member of Technical Staff, Product Security2d agoHybrid (San Francisco Bay Area, USA) · Product Engineering
- Software Engineer, Business Engineering2d agoAlmaty, Kazakhstan · Product Engineering
- Member of Technical Staff, Enterprise Security2d agoHybrid (San Francisco Bay Area, USA) · Product Engineering