Architect, Applied Cyber Detections & OSINT

Wilco; United States; Remote; USD 75,000 - 90,000; Full time

Benefits offered by this job

Meaningful equity

Remote-first culture

Flexible PTO

Health benefits

Parental leave

Job summary

Doppel is seeking an Architect, Applied Cyber, Detections to strengthen detection workflows, conduct OSINT investigations, and support customer implementations. You will optimize intel sourcing and brand abuse detection, collaborating with Product and Engineering to scale the platform.

You will work with CSMs, AEs, and TAMs to handle ad hoc detection requests and platform configurations, while collaborating with Engineering to surface limitations and drive improvements.

Qualifications

• 3+ years of OSINT investigations, threat intel, or detections engineering.
• 1+ years of SOCMINT investigations.
• Experience with URL intelligence platforms and complex queries (URLScan/VirusTotal/Spamhaus).
• Knowledge of phishing and credential theft TTPs.
• Familiar with social media, paid ad, and SERP abuse patterns.
• Strong ability to support ad hoc customer requests with cross-functional teams.
• Excellent written and verbal English communication.

Responsibilities

• Translate risk, brand abuse, and phishing use cases into scalable detection coverage (website domains, SOCMINT, surface areas).
• Onboard clients, implement detection logic, and source workflows for select customers.
• Build and refine platform automation to support alert triaging and movements.
• Conduct RCAs for missed detections, false positives/negatives, and low-volume customers.
• Collaborate with CSMs, AEs, and TAMs on ad hoc detection requests and configurations.
• Work with Engineering and Product to surface platform limitations and drive improvements.
• Stay current on agentic phishing, credential theft, recruitment scams, social media impersonation, and paid ads abuse trends.

Skills

OSINT investigations

Threat intelligence

Detections engineering

SOCMINT investigations

URL intelligence

Phishing TTPs

Social media abuse patterns

Cross-functional collaboration

English communication

Education

Cybersecurity degree

Tools

URLScan

VirusTotal

Spamhaus

Google Workspace

Jira/Linear

Job description

Doppel is seeking an Architect, Applied Cyber, Detections to strengthen detection workflows, conduct OSINT investigations, and support customer implementations. You will optimize intel sourcing and brand abuse detection, collaborating with Product and Engineering to scale the platform.

You will work with CSMs, AEs, and TAMs to handle ad hoc detection requests and platform configurations, while collaborating with Engineering to surface limitations and drive improvements.