Solutions Architect, Detections

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Solutions Architect, Detections based in United States.

This is a remote opportunity focused on strengthening detection capabilities against phishing, impersonation, fraud, and other forms of digital abuse. You will translate customer risk scenarios into scalable detection coverage across websites, social media, and other digital surfaces. The role combines hands-on OSINT and SOCMINT investigations with detection engineering, automation, and customer enablement. You’ll investigate missed detections and false positives while identifying opportunities to improve platform performance. Working closely with Product, Engineering, Customer Success, and other technical teams, you’ll help turn frontline intelligence into lasting platform improvements. This is an impactful role within a fast-growing cybersecurity environment where your work can directly influence how organizations defend against evolving social-engineering threats.

Accountabilities

• Support post-sales detection operations by translating customer risk, brand abuse, and phishing use cases into effective, scalable detection coverage across website domains, SOCMINT, and related attack surfaces.
• Lead customer onboarding activities, detection logic implementation, and intelligence-sourcing workflows for selected accounts.
• Build, refine, and validate automation logic using proprietary frameworks to improve alert triage and workflow efficiency.
• Investigate missed detections, false positives, false negatives, incorrect alert movements, and low-volume customer activity, conducting root cause analyses and recommending corrective actions.
• Partner with Customer Success Managers, Account Executives, and Technical Account Managers to address ad hoc detection requests and configure platform capabilities.
• Collaborate with Engineering, Product, and Solutions Architecture teams to communicate platform limitations, share detection insights, and identify opportunities for process and product improvements.
• Monitor emerging threat patterns and tactics involving agentic phishing, credential theft, recruitment scams, social-media impersonation, disinformation, paid advertising abuse, and related forms of digital deception.

Requirements

• 3+ years of professional experience in OSINT investigations, threat intelligence, detections engineering, or a closely related cybersecurity discipline.
• At least 1 year of experience conducting SOCMINT investigations.
• Hands-on experience with URL intelligence platforms and the ability to construct complex queries using tools such as URLScan, VirusTotal, or Spamhaus.
• Strong understanding of common phishing, credential-theft, social-media abuse, paid-advertising, and SERP manipulation techniques.
• Demonstrated ability to investigate threats, identify patterns, troubleshoot detection gaps, and translate findings into actionable improvements.
• Strong customer-facing skills, with the ability to respond effectively to ad hoc requests and communicate technical findings across Product and Engineering teams.
• Excellent written and verbal communication skills in English.
• A degree in cybersecurity, information assurance, intelligence studies, data analytics, or a related field is preferred.
• Experience developing advanced SERP queries or Google dorks is a plus.
• Familiarity with agentic AI workflows, including coding-oriented or self-hosted LLM agents, is advantageous.
• Python experience for automation, along with familiarity with Google Workspace and Jira or Linear, is beneficial.

Benefits

• Base/OTE compensation of approximately $75,000-$90,000, depending on location and relevant experience.
• Meaningful equity participation, providing an opportunity to share in the organization’s growth and success.
• Fully remote-first working environment.
• Flexible paid time off.
• Comprehensive health benefits.
• Parental leave and additional employee support programs.
• Opportunity to work in a high-growth cybersecurity environment with significant visibility and immediate impact.
• Exposure to advanced AI-driven security technologies and emerging digital-threat intelligence practices.