Security Engineer

Doppel; Covina (CA); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Meaningful equity

Remote first culture

Flexible PTO

Job summary

Doppel is seeking a Corporate Security Engineer to strengthen identity and access controls, endpoint security, cloud posture, and data security across our distributed workforce and SaaS environment.

You will own security controls, develop automations, and drive incident response and vulnerability management at scale, partnering with IT, Legal, and Compliance to improve security posture in a fast-growing company.

Qualifications

• 5–7 years of experience in corporate security, security engineering, detection and response, cloud security, or a closely related role.
• Hands-on experience with identity platforms, endpoint detection & response, and endpoint management; experience with Okta, CrowdStrike, and Jamf is especially relevant.
• Experience securing cloud environments and investigating cloud risk; GCP and Wiz experience is helpful.
• Experience administering a cloud SIEM, developing or tuning detections, and investigating security alerts across multiple telemetry sources.
• Ability to automate security workflows and integrate tools via scripts, APIs, or workflow platforms.
• Strong written and verbal communication, cross-functional collaboration, and documentation of repeatable processes.

Responsibilities

• Own and improve identity and access controls, including single sign-on, multifactor authentication, user lifecycle workflows, privileged access, and SaaS app integrations.
• Administer and strengthen endpoint security across a remote workforce, with policy enforcement, detection, investigation, and remediation.
• Operate DLP/DSPM and related data security controls to improve sensitive data discovery and risk reduction.
• Build and tune SIEM data pipelines, detections, alerts, dashboards, and investigation workflows.
• Develop automations and tool integrations to reduce repetitive work and speed responses.
• Run vulnerability management from discovery through risk-based prioritization, remediation ownership, verification, and reporting.
• Lead or support incident response, including triage, containment, investigation, and playbook updates.
• Partner with IT, Engineering, Legal, and Compliance on onboarding/offboarding controls and audit evidence.

Skills

Identity platforms

Endpoint security

Cloud security

Automation

Incident response

Vulnerability management

SIEM

Cross-functional collaboration

Tools

Okta

CrowdStrike

Jamf

GCP

Wiz

Job description

About Doppel

Doppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help some of the world’s most recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. By unifying Digital Risk Protection, Human Risk Management and Email Security, Doppel connects threats into a real-time intelligence graph to power faster disruption, smarter defense, and modern security awareness at scale.

Backed by leading investors including Andreessen Horowitz and Bessemer Venture Partners, and trusted by leading enterprises, Doppel is a rapidly growing Series C startup building the future of social engineering defense. Our team combines deep cybersecurity expertise, operational rigor, and startup velocity to solve some of the internet’s most urgent trust and safety challenges.

The Role

At Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates.

We are looking for a Corporate Security Engineer to strengthen the systems that protect Doppel’s workforce, SaaS environment, and cloud services. In this role, you will own and improve identity and access controls, endpoint security, cloud posture, data security, logging and detections, vulnerability management, and incident response. You will also build automation that makes these controls easier to operate at scale.

What You Will Do

• Own and improve identity and access controls, including single sign-on, multifactor authentication, user lifecycle workflows, privileged access, and SaaS application integrations.
• Administer and strengthen endpoint security across a remote workforce, with reliable coverage, policy enforcement, detection, investigation, and remediation.
• Operate DLP/DSPM and related data security controls to improve sensitive-data discovery, access visibility, and risk reduction across cloud and SaaS environments.
• Build and tune SIEM data pipelines, detections, alerts, dashboards, and investigation workflows using identity, endpoint, cloud, and SaaS telemetry.
• Develop automations and tool integrations that reduce repetitive work, improve response times, and make security controls easier to operate at scale.
• Run vulnerability management from discovery through risk-based prioritization, remediation ownership, verification, and reporting.
• Lead or support incident response, including triage, containment, investigation, recovery, root-cause analysis, and updates to playbooks and detections.
• Partner with IT, Engineering, Legal, and Compliance on onboarding and offboarding controls, SaaS security, audit evidence, and practical security improvements.

What We Are Looking For

• 5-7 years of experience in corporate security, security engineering, detection and response, cloud security, or a closely related role.
• Hands-on experience with identity platforms, endpoint detection and response, and endpoint management; experience with Okta, CrowdStrike, and Jamf is especially relevant.
• Experience securing cloud environments and investigating cloud risk; GCP and Wiz experience is helpful, and comparable experience with another major cloud platform or posture-management tool is welcome.
• Experience administering a cloud SIEM, developing or tuning detections, and investigating security alerts across multiple telemetry sources.
• Ability to automate security workflows and integrate tools using scripts, APIs, or workflow platforms.
• Working knowledge of vulnerability management and incident response, with sound judgment for prioritizing risk and coordinating remediation.
• Understanding of SaaS identity, access, and endpoint controls in a distributed or remote-first environment.
• Clear written and verbal communication, strong cross-functional collaboration, and the ability to document repeatable processes.
• A practical, curious, and resourceful approach to security work in a fast-moving, high-growth environment. Security, cloud, SIEM, or endpoint certifications are helpful but not required.

Why Join Doppel

• Meaningful equity so you share in Doppel’s success
• Remote first culture with flexibility built in
• Flexible PTO, comprehensive health benefits, parental leave, and more
• A high growth environment where your work has immediate impact and visibility

Join Doppel

Doppel is the first platform built to dismantle digital deception at scale. We scan over 150 billion entities daily and deploy continuously adaptive AI SOC agents, paired with expert human analysts, to uncover and disrupt the infrastructure behind phishing, impersonation, and online fraud before attacks can spread. Our Threat Grid turns every customer signal into shared intelligence, making each disruption smarter, faster, and more effective.

We’re not just another cybersecurity company. We’re defining the future of social engineering defense, where trust is protected, and deception becomes unprofitable. Backed by top-tier investors and trusted by some of the world’s most recognized brands, Doppel is growing fast. If you’re driven to solve real-world problems with bold technology, we’d love to meet you.