Software Engineer II (Fraud)

About Bukalapak Gaming

Bukalapak Gaming (Lapakgaming & Itemku), part of the Bukalapak ecosystem, provides digital products and services for gamers at scale. We build fast-moving, reliable, and secure platforms to serve millions of users across Indonesia and beyond. At Bukalapak, you'll be part of a dynamic, hands-on engineering team making a direct impact on product integrity and business growth.

About the Job

The Software Engineer II (Fraud) will be responsible for designing, developing, and maintaining Bukalapak Gaming’s anti-fraud engineering systems, risk engines, and internal mitigation tools. The role will focus on preventing payment fraud, account takeovers, and promo abuse, ensuring seamless transactions for legitimate users while keeping malicious actors out. This role works closely with Product, Engineering, Data, and Risk Operations teams to turn evolving fraud patterns into scalable automated defenses.

Responsibilities

• Developing and scaling backend services, real-time risk engines, and automated anti-fraud features across gaming platforms
• Building and enhancing internal risk management tools, review dashboards, and case workflows for operational teams
• Investigating active fraud vectors, security vulnerabilities, and transactional exploits to deliver permanent engineering solutions
• Monitoring rule performance, risk scoring accuracy, false-positive rates, and transaction reliability
• Collaborating cross-functionally with Product Managers, Data Scientists, IT Security Specialist, and Risk Ops to address emerging threats
• Writing clean, maintainable code following team standards, conducting code reviews, and maintaining high system quality
• Utilizing logs, metrics, and operational signals to debug issues and optimize end-to-end system health

Requirements

• Minimum 3-5 years of software engineering experience, with dedicated experience as a Fraud Engineer or Risk Software Engineer in a technology company (e.g., Fintech, E-commerce, Gaming, or digital payments).
• Proven track record in building and scaling anti-fraud mechanisms, real-time risk scoring engines, user behavioral tracking, or fraud detection tools.
• Strong backend or fullstack engineering fundamentals, including experience in API design, databases (SQL/NoSQL), system architecture, and clean coding practices.
• Strong problem-solving and analytical abilities to analyze risk patterns, trace exploitation vectors, and construct scalable technical controls.
• Proven ability to deliver with moderate autonomy, taking feature ownership from development through deployment and monitoring.
• Excellent collaboration and communication skills to work effectively with engineers, data teams, and non-technical risk operations.
• Exposure to streaming/event-driven systems (e.g., Kafka) or integrating third-party fraud and identity management vendors is a plus.