Applied Cyber, Email Security (Detection Engineering)
About The Position
Doppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help some of the world’s most recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. By unifying Digital Risk Protection, Human Risk Management and Email Security, Doppel connects threats into a real-time intelligence graph to power faster disruption, smarter defense, and modern security awareness at scale. Backed by leading investors including Andreessen Horowitz and Bessemer Venture Partners, and trusted by leading enterprises, Doppel is a rapidly growing Series C startup building the future of social engineering defense. Our team combines deep cybersecurity expertise, operational rigor, and startup velocity to solve some of the internet’s most urgent trust and safety challenges. At Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates. You’ll investigate the hardest email threats and detection failures, then turn what you learn into detections, evals, AI behavior, and product capabilities that scale across every Doppel customer. As our technology learns to handle today’s problems, you’ll move up the complexity curve to solve the next ones.
Requirements
- Bring deep practitioner judgment from one or more of detection engineering, SOC/IR, threat intelligence/OSINT, or email/messaging security; range across multiple areas is a major plus.
- Take messy detection failures from “something’s off” to root cause — prove what matters in the data and turn FP/FN cases into durable fixes.
- Think like both attacker and defender across phishing, BEC, impersonation, credential theft, ATO, and evolving social-engineering TTPs.
- Turn expert judgment into detection logic, evals, tests, requirements, and systems that scale beyond a single investigation or customer.
- Thrive at the intersection of security, AI, product, and customers — challenge assumptions, use coding/AI agents aggressively, and move fast through ambiguity.
Nice To Haves
- SEG/email-security depth: SPF, DKIM, DMARC, headers, mail flow, and sender identity.
- Experience with M365/Exchange Online, Google Workspace, or email-security APIs.
- Detection-as-code, eval datasets/labeling, model benchmarks, or LLM/ML security systems.
- Built agentic security workflows, autonomous triage, or LLM evaluation systems.
- Experience with Agentic SOC, SIEM/TI tooling, and threat-intelligence provider/vendor partnerships.
Responsibilities
- Own detection problems end-to-end — from emerging TTP or FN → investigation → detection hypothesis → validation → production coverage → measurement.
- Use AI as a force multiplier — build evals, supervise model behavior, use coding agents aggressively, and automate repetitive investigative work.
- Partner with Product and Engineering on signals, detection logic, edge cases, and validation.
- Work with customers and GTM on detection gaps, real-world TTPs, and platform behavior.
- Turn tooling, threat-intelligence partnerships, and provider relationships into new signals and detection capabilities.
Benefits
- Meaningful equity so you share in Doppel's success
- Remote-first culture
- Flexible PTO, comprehensive health benefits, parental leave, and more
- A high-growth environment where your work has immediate technical and customer impact
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
