Applied Cyber, Detections
Doppel · US Remote
About this role
## About Doppel Doppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. By unifying **Digital Risk Protection**, **Human Risk Management**, and **Email Security**, Doppel connects threats into a real-time intelligence graph to enable faster disruption, smarter defense, and modern security awareness at scale. ## The Role — Architect, Applied Cyber (Detections) We’re looking for an **Architect, Applied Cyber, Detections** to improve detection workflows, conduct ad hoc OSINT investigations, and support key customer implementations. You’ll optimize intelligence sourcing and brand abuse detection capabilities, partner with Product and Engineering teams, and help drive scalable platform improvements. ## What You Will Do - Support **post-sales detection operations** by translating risk, brand abuse, and phishing use cases into effective, scalable detection coverage across website domains, **SOCMINT**, and related surfaces. - Conduct **onboarding**, detection logic implementation, and sourcing workflows for select customers. - Build, refine, and validate **platform automation logic** to support alert triaging and movements. - Investigate and perform **root cause analyses (RCAs)** for missed detections, false positives/negatives, improper alert movements, and low-volume customers. - Partner with **Customer Success Managers (CSMs)**, **Account Executives (AEs)**, and **Technical Account Managers (TAMs)** to support ad hoc detection requests and platform configurations. - Collaborate cross-functionally with **Engineering**, **Product**, and other Solutions Architecture teams to surface platform limitations, share detection findings, and contribute process improvement ideas. - Stay current on trends, patterns, and evolving **TTPs** related to agentic phishing, credential theft, recruitment scams, social media impersonation, disinformation, and paid ads abuse. ## What We Are Looking For - **3+ years** experience in **OSINT investigations**, threat intelligence, or **detections engineering**. - **1+ years** experience conducting **SOCMINT** investigations. - Experience using **URL intelligence platforms** and constructing complex queries (e.g., **URLScan**, **VirusTotal**, **Spamhaus**). - Strong knowledge of common **phishing** and **credential theft** TTPs. - Strong knowledge of common **social media**, **paid ad**, and **SERP abuse** patterns. - Ability to support ad hoc customer requests and collaborate cross-functionally with Product and Engineering. - Excellent written and verbal communication skills in **English**. ## Nice to Have - Degree in cybersecurity, information assurance, intelligence studies, or data analytics. - Experience creating advanced **SERP queries** (Google dorks). - Experience using/building/supporting **agentic workflows** beyond basic answer/response interactions (e.g., Claude Code, Codex, OpenClaw, or self-hosted LLM agents). - Experience using **Python** for automation. - Experience using **Google Workspace**. - Experience using **Jira** or **Linear**. ## Why Join Doppel - **Compensation:** $75,000–$90,000 OTE (based on location and relevant experience) - Meaningful equ
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.