Email Security Detection Engineer - AI-Driven Threats

Wilco; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible PTO

Health benefits

Parental leave

Equity

Job summary

Doppel seeks a security-focused engineer to tackle email-borne threats on an AI-native defense platform. You will own detection problems from attacker techniques to production coverage, and use AI to automate investigations and evaluate model behavior.

You will collaborate with Product and Engineering on signals, validation, and customer-facing insights, translating threat intel into practical detections and platform capabilities that scale across customers.

Qualifications

• Deep practitioner judgment in detection engineering, SOC/IR, threat intel/OSINT, or email security.
• Ability to turn messy detection failures into data-backed root causes and durable fixes.
• Think like attacker and defender across phishing, BEC, impersonation, credential theft.
• Turn expert judgment into scalable detection logic, evaluations, tests, and requirements.
• Comfort working across security, AI, product, and customer surfaces.

Responsibilities

• Own detection problems end to end, from attacker techniques or false negatives through investigation and production coverage.
• Use AI as a force multiplier: build evaluations, supervise model behavior, automate investigations.
• Partner with Product and Engineering on signals, edge cases, and validation.
• Work with customers and go-to-market teams to understand detection gaps and platform behavior.
• Convert tooling, threat intel partnerships, and provider relationships into new signals and detection capabilities.

Skills

Detection engineering

SOC/IR

Threat intelligence/OSINT

Email security

Tools

SIEM tools

Threat intelligence tooling

Email security APIs

Microsoft 365/Exchange Online

Job description

Doppel seeks a security-focused engineer to tackle email-borne threats on an AI-native defense platform. You will own detection problems from attacker techniques to production coverage, and use AI to automate investigations and evaluate model behavior.

You will collaborate with Product and Engineering on signals, validation, and customer-facing insights, translating threat intel into practical detections and platform capabilities that scale across customers.