Investigate email threats and develop detection capabilities in a remote-first cybersecurity startup.
Posted by employer 1 month ago
First seen on Joblaze 1 month ago
Last verified on the company career page 6 hours ago
Skills & Technologies
What you'll build
- Own detection problems end-to-end
- Build evals and supervise model behavior
- Partner with Product and Engineering
- Work with customers on detection gaps
- Turn tooling into new signals
Must have
- Deep practitioner judgment in detection engineering or email security
- Ability to prove root cause of detection failures
- Think like both attacker and defender
- Turn expert judgment into detection logic
- Thrive at the intersection of security, AI, product, and customers
Nice to have
- Depth in SPF, DKIM, DMARC
- Experience with M365/Exchange Online
- Detection-as-code experience
- Built agentic security workflows
- Experience with Agentic SOC
AI in the day-to-day
Use AI as a force multiplier to build evals and automate investigative work.
Not disclosed in this posting: years of experience, visa sponsorship.
Benefits
Joblaze summary
In this role, the individual will tackle complex email threats by investigating detection failures and developing scalable detection capabilities for Doppel's AI-driven platform. Key skills include expertise in detection engineering, threat intelligence, and a strong understanding of email security protocols. This position is ideal for someone with a background in cybersecurity who can navigate both offensive and defensive strategies against evolving social engineering tactics. The team operates in a fast-paced, high-growth environment, emphasizing collaboration across security, AI, and product development.
Joblaze insights
- Listed about a month ago — first seen on Joblaze September 17, 2026. Last confirmed on Doppel's careers page November 2, 2026.
- Salary band is below the typical range for Security roles (median ~$170,000).
- Starts above 10% of 10 comparable mid security roles in United States that list AI/ML we track (median $180,000 across 5 companies). See AI/ML salary trends
- AI/ML appears in 6% of 215 comparable mid security roles in United States; OSINT appears in 0.5% of 215 comparable mid security roles in United States.
Quick facts
- Is the Applied Cyber, Email Security (Detection Engineering) role remote?
- Yes — Doppel lists this as a fully remote position.
- What's the salary range?
- Doppel lists $120,000–$180,000 for this role.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: AI/ML, Email Security, OSINT, SoC, Threat Intelligence.
- What seniority level is this role?
- Doppel targets mid-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Applied Cyber, Email Security (Detection Engineering) role at Doppel.
From the original posting
At Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates.
The Role
You’ll investigate the hardest email threats and detection failures, then turn what you learn into detections, evals, AI behavior, and product capabilities that scale across every Doppel customer. As our technology learns to handle today’s problems, you’ll move up the complexity curve to solve the next ones.
What You Will Do
Own detection problems end-to-end — from emerging TTP or FN → investigation → detection hypothesis → validation → production coverage → measurement.
Use AI as a force multiplier — build evals, supervise model behavior, use coding agents aggressively, and automate repetitive investigative work.
Partner with Product and Engineering on signals, detection logic, edge cases, and validation.
Work with customers and GTM on detection gaps, real-world TTPs, and platform behavior.
Turn tooling, threat-intelligence partnerships, and provider relationships into new signals and detection capabilities.
Required Qualifications
Bring deep practitioner judgment from one or more of detection engineering, SOC/IR, threat intelligence/OSINT, or email/messaging security; range across multiple areas is a major plus.
Take messy detection failures from “something’s off” to root cause — prove what matters in the data and turn FP/FN cases into durable fixes.
Think like both attacker and defender across phishing, BEC, impersonation, credential theft, ATO, and evolving social-engineering TTPs.
Turn expert judgment into detection logic, evals, tests, requirements, and systems that scale beyond a single investigation or customer.
Thrive at the intersection of security, AI, product, and customers — challenge assumptions, use coding/AI agents aggressively, and move fast through ambiguity.
Nice to Have
SEG/email-security depth: SPF, DKIM, DMARC, headers, mail flow, and sender identity.
Experience with M365/Exchange Online, Google Workspace, or email-security APIs.
Detection-as-code, eval datasets/labeling, model benchmarks, or LLM/ML security systems.
Built agentic security workflows, autonomous triage, or LLM evaluation systems.
Experience with Agentic SOC, SIEM/TI tooling, and threat-intelligence provider/vendor partnerships.
Why This Role
Shape the product, not just operate it. You work on real emerging attacks and turn practitioner judgment into detections, AI behavior, and product capabilities alongside Product, Engineering, AI/ML, customers, and ecosystem partners.
Why Join Doppel
Compensation: $120,000-$180,000 OTE, based on location, experience, and demonstrated expertise
Meaningful equity so you share in Doppel's success
Remote-first culture
Flexible PTO, comprehensive health benefits, parental leave, and more
A high-growth environment where your work has immediate technical and customer impact
Standard company text repeated across Doppel's postings is omitted here.