Email Analyst

About Doppel

Doppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help some of the world’s most recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. By unifying Digital Risk Protection, Human Risk Management and Email Security, Doppel connects threats into a real-time intelligence graph to power faster disruption, smarter defense, and modern security awareness at scale.

Backed by leading investors including Andreessen Horowitz and Bessemer Venture Partners, and trusted by leading enterprises, Doppel is a rapidly growing Series C startup building the future of social engineering defense. Our team combines deep cybersecurity expertise, operational rigor, and startup velocity to solve some of the internet’s most urgent trust and safety challenges.

At Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates.

The Role

You’ll investigate complex email threats and detection failures, then turn what you learn into detection improvements, evals, AI behavior, and product capabilities that scale across Doppel customers. As our technology automates more routine work, you’ll grow into harder investigations and broader detection ownership.

What You Will Do

• Work detection problems from emerging TTP or FN → investigation → detection hypothesis → validation → measurable improvement.

• Use AI as a force multiplier: help build evals, review model behavior, use coding agents, and automate repetitive investigative work.

• Analyze emails and telemetry, identify FP/FN patterns, and partner with Product and Engineering to improve signals, heuristics, detection logic, and validation.

• Work with customers and GTM on detection gaps, real-world TTPs, and platform behavior.

• Help turn tooling, threat-intelligence partnerships, and provider relationships into new signals and detection capabilities.

Required Qualifications

• Bring hands-on experience in one or more of detection engineering, SOC/IR, threat intelligence/OSINT, or email/messaging security; experience across multiple areas is a plus.

• Investigate ambiguous security cases, query logs and telemetry, and explain what happened, why it happened, and what should change.

• Understand attacker and defender behavior across phishing, BEC, impersonation, credential theft, ATO, and evolving social-engineering TTPs.

• Turn investigative findings into clear detection recommendations, heuristics, tests, evals, and durable improvements.

• Be curious and comfortable working across security, AI, product, and customers; all while challenging assumptions, using coding/AI agents, and learning quickly through ambiguity.

Nice to Have

• SEG/email-security depth: SPF, DKIM, DMARC, headers, mail flow, and sender identity.

• Experience with M365/Exchange Online, Google Workspace, or email-security APIs.

• Detection-as-code, eval datasets/labeling, model benchmarks, or LLM/ML security systems.

• Exposure to agentic security workflows, autonomous triage, or LLM evaluation systems.

• Experience with Agentic SOC, SIEM/TI tooling, and threat-intelligence provider/vendor partnerships.

Why This Role

• Go beyond alert triage. You’ll work on real emerging attacks, see your findings become detections, AI behavior, and product capabilities, and grow toward end-to-end detection ownership alongside Product, Engineering, AI/ML, customers, and ecosystem partners.

Why Join Doppel

• Compensation: $90,000-$130,000 OTE, based on location, experience, and demonstrated expertise

• Meaningful equity so you share in Doppel's success

• Remote-first culture

• Flexible PTO, comprehensive health benefits, parental leave, and more

• A high-growth environment where your work has immediate technical and customer impact

Join Doppel

Doppel is the first platform built to dismantle digital deception at scale. We scan over 150 billion entities daily and deploy continuously adaptive AI SOC agents, paired with expert human analysts, to uncover and disrupt the infrastructure behind phishing, impersonation, and online fraud before attacks can spread. Our Threat Grid turns every customer signal into shared intelligence, making each disruption smarter, faster, and more effective.

We’re not just another cybersecurity company. We’re defining the future of social engineering defense, where trust is protected, and deception becomes unprofitable. Backed by top-tier investors and trusted by some of the world’s most recognized brands, Doppel is growing fast. If you’re driven to solve real-world problems with bold technology, we’d love to meet you.