2 months ago
Responsibilities
- Own detection problems end to end, from emerging threats or false negatives through investigation, hypothesis development, validation, production coverage, and measurement.
- Build evaluations, supervise AI model behavior, use coding agents, and automate repetitive investigative work.
- Partner with Product and Engineering on signals, detection logic, edge cases, and validation.
- Work with customers and go-to-market teams on detection gaps, real-world tactics, techniques, procedures, and platform behavior.
- Use tooling, threat-intelligence partnerships, and provider relationships to create new signals and detection capabilities.
- Translate investigations and practitioner judgment into scalable detection logic, evaluations, tests, requirements, and systems.
Requirements
- Bring deep practitioner experience in detection engineering, SOC or incident response, threat intelligence or OSINT, or email and messaging security.
- Diagnose detection failures from initial anomalies through root cause and convert false-positive and false-negative cases into durable fixes.
- Understand attacker and defender perspectives across phishing, business email compromise, impersonation, credential theft, account takeover, and evolving social-engineering tactics.
- Preferred qualifications include SEG or email-security expertise with SPF, DKIM, DMARC, headers, mail flow, and sender identity.
- Preferred qualifications include experience with M365 or Exchange Online, Google Workspace, email-security APIs, detection-as-code, evaluation datasets or labeling, model benchmarks, or LLM and ML security systems.
- Preferred qualifications include building agentic security workflows, autonomous triage, LLM evaluation systems, Agentic SOC or SIEM and threat-intelligence tooling, and threat-intelligence provider or vendor partnerships.
Benefits
- Remote-first culture.
- Meaningful equity participation.
- Flexible PTO, comprehensive health benefits, and parental leave.
- High-growth environment with immediate technical and customer impact.
Categories
About Doppel
Doppel builds an AI-driven social engineering defense platform that unifies email security, digital risk/brand protection, and human risk management for enterprises. The SaaS platform disrupts phishing and impersonation by scanning across web and communication channels and executing automated takedowns of lookalike domains, rogue profiles, and malicious infrastructure. Privately held and founded in 2022, it is backed by a16z and Bessemer, with customers including OpenAI, United Airlines, and Coinbase.