1 month ago
Base Salary
$175k - $200k/yr
Responsibilities
- Partner with product and engineering teams on architecture reviews, threat modeling, secure design, and practical security recommendations.
- Evaluate and roll out AI-assisted and agentic workflows for security reviews, vulnerability triage, and remediation with appropriate validation and human oversight.
- Improve first- and third-party security tooling, including the in-house ASPM platform, to reduce noise and improve finding prioritization.
- Strengthen SDLC and CI/CD security controls, including code and dependency scanning, software supply chain protections, and safeguards for AI-assisted development.
- Advise engineering teams on GCP security for networking, data protection, secrets management, workload runtimes, logging, and monitoring.
- Implement least-privilege IAM, secure workload identities, and security guardrails through policy and infrastructure-as-code.
- Drive vulnerability management from triage through resolution, including risk assessment, ownership, SLA tracking, exceptions, and risk acceptance.
- Coordinate penetration testing engagements, findings validation, remediation, and retesting.
- Help scale the product security program and communicate risks, progress, and outcomes to security leadership.
- Enable engineers through documentation, reusable guidance, targeted training, and mentorship.
Requirements
- 5–7 years of experience in product security, cloud security engineering, software development, or a related field.
- Practical experience applying AI and agentic workflows to security reviews, vulnerability triage, and remediation, including understanding risks from AI-assisted development.
- Strong knowledge of Google Cloud Platform security practices, including IAM, networking, data protection, and workload runtimes.
- Hands-on experience with penetration testing coordination, threat modeling, and risk assessment.
- Proficiency in Python and cloud-native programming or scripting languages for security automation, policy enforcement, and continuous compliance controls using infrastructure as code.
- Familiarity with least-privilege IAM design and access reviews.
- Ability to communicate security risks and recommendations clearly to engineering and leadership audiences.
Benefits
- $175,000–$200,000 USD compensation; Canadian compensation follows Canadian compensation bands and may vary by location.
- Meaningful equity.
- Remote-first flexibility, with remote work across the U.S. and Canada or hybrid work from New York, San Francisco, or Toronto.
- Quarterly offsites and frequent opportunities to travel to company offices.
- Flexible PTO, comprehensive health benefits, and parental leave.
- High-growth environment with immediate impact and visibility.
Tech Stack
Categories
About Doppel
Doppel builds an AI-driven social engineering defense platform that unifies email security, digital risk/brand protection, and human risk management for enterprises. The SaaS platform disrupts phishing and impersonation by scanning across web and communication channels and executing automated takedowns of lookalike domains, rogue profiles, and malicious infrastructure. Privately held and founded in 2022, it is backed by a16z and Bessemer, with customers including OpenAI, United Airlines, and Coinbase.