← All roles

Applied Cyber, Detections

Doppel· Operations
Apply on company site
Remote$75k - $95kFull-timePosted 3mo ago

About the role

Architect to improve detection workflows, conduct ad hoc OSINT investigations, and support key customer implementations. Optimize intelligence sourcing and brand abuse detection, partner with Product and Engineering, and drive scalable platform improvements.

Responsibilities

  • Support post sales detection operations for customers by translating risk, brand abuse, and phishing use cases into effective and scalable detection coverage across website domains, SOCMINT, and other related surface areas.
  • Conduct onboarding, detection logic implementation, and sourcing workflows for select customers.
  • Build, refine, and validate platform automation logic using proprietary frameworks to support alert triaging and movements.
  • Investigate and conduct root cause analyses (RCAs) for missed detections, false positives, false negatives, improper alert movements, and low volume customers.
  • Work alongside Customer Success Managers (CSMs), Account Executives (AEs), and Technical Account Managers (TAMs) to support ad hoc detection requests and platform configurations.
  • Collaborate cross functionally with Engineering, Product, and other Solutions Architecture teams to surface platform limitations, share detection findings, and contribute ideas for process improvements.
  • Stay up to date with trends, patterns, and evolving TTPs related to agentic phishing, credential theft, recruitment scams, social media impersonation, disinformation, and paid ads abuse.

Qualifications

  • 3+ years of experience in OSINT investigations, threat intelligence, or detections engineering.
  • 1+ years of experience conducting SOCMINT investigations.
  • Experience using URL intelligence platforms and constructing complex queries (e.g., URLScan, VirusTotal, or Spamhaus).
  • Demonstrated knowledge of common phishing and credential theft TTPs.
  • Demonstrated knowledge of common social media, paid ad, and SERP abuse patterns.
  • Strong ability to support ad hoc customer requests and collaborate in cross functional discussions with Product and Engineering teams.
  • Excellent written and verbal communication skills in English.

Skills

Required:OSINT investigationsSOCMINT investigationsURL intelligence platformsPhishing and credential theft TTPs

Benefits

  • Remote first culture
  • Flexible PTO
  • comprehensive health benefits
  • parental leave
  • equity
  • Meaningful equity so you share in Doppel’s success
  • A high growth environment where your work has immediate impact and visibility
Last updated Sep 24, 2026. Interested? Apply on the company site.
Doppel logo

About Doppel

The world's first platform for Social Engineering Defense.

By pairing cutting-edge AI with expert analysis, we outpace threats like phishing, impersonation, and disinformation—delivering comprehensive coverage, speed, and precision.

Social Engineering DefenseAI securityThreat intelligenceBrand protectionExecutive protectionSocial engineering
Company profileWebsite

More open roles at Doppel