Applied Cyber, Detections

The role

The Architect, Applied Cyber, Detections will improve detection workflows, conduct OSINT investigations, and support customer implementations. This role involves optimizing intelligence sourcing and partnering with Product and Engineering teams to drive platform improvements.

What you will do

• Support post sales detection operations by translating use cases into scalable detection coverage.
• Conduct onboarding, detection logic implementation, and sourcing workflows for select customers.
• Build, refine, and validate platform automation logic using proprietary frameworks.
• Investigate and conduct root cause analyses for missed detections, false positives, and false negatives.
• Work alongside CSMs, AEs, and TAMs to support ad hoc detection requests and platform configurations.
• Collaborate cross functionally with Engineering, Product, and Solutions Architecture teams.
• Stay up to date with trends and evolving TTPs related to phishing, credential theft, and impersonation.

Required qualifications

• 3+ years of experience in OSINT investigations, threat intelligence, or detections engineering.
• 1+ years of experience conducting SOCMINT investigations.
• Experience using URL intelligence platforms and constructing complex queries.
• Demonstrated knowledge of common phishing and credential theft TTPs.
• Demonstrated knowledge of common social media, paid ad, and SERP abuse patterns.
• Strong ability to support ad hoc customer requests and collaborate in cross functional discussions.
• Excellent written and verbal communication skills in English.

Nice to have

• A degree in cybersecurity, information assurance, intelligence studies, or data analytics.
• Experience creating advanced SERP queries (Google dorks).
• Experience using, building, or supporting agentic workflows beyond answer and response interactions.
• Experience using Python for automation.
• Experience using Google Workspace.
• Experience using Jira or Linear.

Benefits

• Meaningful equity
• Remote first culture
• Flexible PTO
• Comprehensive health benefits
• Parental leave

About the company

Doppel is a Series C startup building an AI-native platform for social engineering defense. The company uses agentic AI to protect brands and individuals from phishing, impersonation, and fraud.