Applied Cyber, Email Security (Detection Engineering)

The role

You will investigate email threats and detection failures to create detections, evals, AI behavior, and product capabilities. You will own detection problems end-to-end and partner with Product and Engineering on signals and logic.

What you will do

• Own detection problems end-to-end from investigation to production coverage
• Use AI to build evals, supervise model behavior, and automate investigative work
• Partner with Product and Engineering on signals, detection logic, and validation
• Work with customers and GTM on detection gaps and platform behavior
• Turn tooling and threat-intelligence partnerships into new detection capabilities

Required qualifications

• Deep practitioner judgment from detection engineering, SOC/IR, threat intelligence/OSINT, or email/messaging security
• Ability to take messy detection failures to root cause
• Ability to think like both attacker and defender across phishing, BEC, impersonation, credential theft, ATO, and evolving social-engineering TTPs
• Ability to turn expert judgment into detection logic, evals, tests, requirements, and systems
• Ability to thrive at the intersection of security, AI, product, and customers

Nice to have

• SEG/email-security depth: SPF, DKIM, DMARC, headers, mail flow, and sender identity
• Experience with M365/Exchange Online, Google Workspace, or email-security APIs
• Detection-as-code, eval datasets/labeling, model benchmarks, or LLM/ML security systems
• Built agentic security workflows, autonomous triage, or LLM evaluation systems
• Experience with Agentic SOC, SIEM/TI tooling, and threat-intelligence provider/vendor partnerships
• Range across multiple areas of detection engineering, SOC/IR, threat intelligence/OSINT, or email/messaging security

Benefits

• Meaningful equity
• Remote-first culture
• Flexible PTO
• Comprehensive health benefits
• Parental leave

About the company

Doppel is a Series C startup building an AI-native platform for social engineering defense. The company uses agentic AI to protect brands from phishing, impersonation, and fraud.