Applied Cyber, Email Security (Detection Engineering)
Doppel · US Remote
About this role
## Applied Cyber, Email Security (Detection Engineering) ### About Doppel Doppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. We unify **Digital Risk Protection**, **Human Risk Management**, and **Email Security** into a real-time intelligence graph to enable faster disruption, smarter defense, and modern security awareness at scale. ### The Role You’ll investigate the hardest email threats and detection failures, then turn what you learn into **detections, evals, AI behavior, and product capabilities** that scale across every Doppel customer. As the technology learns to handle today’s problems, you’ll move up the complexity curve to solve the next ones. ### What You Will Do - **Own detection problems end-to-end**: emerging TTP or FN → investigation → detection hypothesis → validation → production coverage → measurement - **Use AI as a force multiplier**: build evals, supervise model behavior, use coding agents aggressively, and automate repetitive investigative work - **Partner with Product and Engineering** on signals, detection logic, edge cases, and validation - **Work with customers and GTM** on detection gaps, real-world TTPs, and platform behavior - **Turn tooling and partnerships into new signals** and detection capabilities ### Required Qualifications - Deep practitioner judgment from one or more of: **detection engineering, SOC/IR, threat intelligence/OSINT, or email/messaging security** (breadth across areas is a plus) - Ability to take messy detection failures from “something’s off” to **root cause**, prove what matters in the data, and turn FP/FN cases into durable fixes - Think like both attacker and defender across: **phishing, BEC, impersonation, credential theft, ATO**, and evolving social-engineering TTPs - Turn expert judgment into **detection logic, evals, tests, requirements, and scalable systems** - Thrive at the intersection of **security, AI, product, and customers**—challenge assumptions, use coding/AI agents aggressively, and move fast through ambiguity ### Nice to Have - **SEG/email-security depth**: SPF, DKIM, DMARC, headers, mail flow, sender identity - Experience with **M365/Exchange Online, Google Workspace**, or email-security APIs - Detection-as-code, eval datasets/labeling, model benchmarks, or LLM/ML security systems - Built agentic security workflows, autonomous triage, or LLM evaluation systems - Experience with **Agentic SOC**, SIEM/TI tooling, and threat-intelligence provider/vendor partnerships ### Compensation & Benefits - **$120,000–$180,000 OTE** (based on location, experience, and demonstrated expertise) - Meaningful equity - Remote-first culture - Flexible PTO, comprehensive health benefits, parental leave, and more ### Why Join Doppel Shape the product—not just operate it. You’ll work on real emerging attacks and turn practitioner judgment into detections, AI behavior, and product capabilities alongside Product, Engineering, AI/ML, customers, and ecosystem partners. If you’re driven to solve real-world problems with bold technology, Doppel would love to meet you.
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.