Applied Cyber, Email Security – Detection Engineering

Doppel

. Own detection problems end-to-end, from emerging TTPs or false negatives through investigation, detection hypothesis, validation, production coverage, and measurement .

Posted 9/15/2026full-timeRemote • United StatesMid-LevelSenior💰 $120,000 - $180,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in detection engineering, threat intelligence, and security operations, with a strong focus on automating investigative processes and developing scalable detection capabilities. Proficient in leveraging AI/ML technologies and collaborating with cross-functional teams to enhance product security and customer outcomes.

Highest-signal resume keywords

Detection EngineeringThreat Intelligence/OSINTEmail Security (SPF, DKIM, DMARC)M365/Exchange Online ExperienceDetection-as-Code

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Detection Logic DevelopmentRoot Cause AnalysisPhishing and Credential Theft AnalysisModel BenchmarkingAgentic Security Workflows

Soft Skills

Collaborative Problem SolvingCritical Thinking

Tools & Technologies

SIEM/TI ToolingEmail-Security APIsLLM/ML Security Systems

Industry Keywords

SOC/IRFalse Positive/False Negative AnalysisAutonomous TriageThreat-Intelligence Partnerships

About the role

Key responsibilities & impact

Own detection problems end-to-end, from emerging TTPs or false negatives through investigation, detection hypothesis, validation, production coverage, and measurement
Build evaluations, supervise model behavior, use coding agents, and automate repetitive investigative work
Partner with Product and Engineering on signals, detection logic, edge cases, and validation
Work with customers and go-to-market teams on detection gaps, real-world TTPs, and platform behavior
Turn tooling, threat-intelligence partnerships, and provider relationships into new signals and detection capabilities
Shape product capabilities alongside Product, Engineering, AI/ML, customers, and ecosystem partners

Requirements

What you’ll need

Deep practitioner judgment in detection engineering, SOC/IR, threat intelligence/OSINT, or email/messaging security
Ability to investigate detection failures, prove root causes in data, and turn FP/FN cases into durable fixes
Ability to think like both attacker and defender across phishing, BEC, impersonation, credential theft, ATO, and evolving social-engineering TTPs
Ability to turn expert judgment into detection logic, evals, tests, requirements, and scalable systems
Ability to work at the intersection of security, AI, product, and customers
SEG/email-security depth including SPF, DKIM, DMARC, headers, mail flow, and sender identity
Experience with M365/Exchange Online, Google Workspace, or email-security APIs
Experience with detection-as-code, evaluation datasets/labeling, model benchmarks, or LLM/ML security systems
Experience building agentic security workflows, autonomous triage, or LLM evaluation systems
Experience with Agentic SOC, SIEM/TI tooling, and threat-intelligence provider/vendor partnerships

Benefits

Comp & perks

Meaningful equity so you share in Doppel's success
Remote-first culture
Flexible PTO
Comprehensive health benefits
Parental leave
High-growth environment with immediate technical and customer impact