{"id":944061,"url":"https://alion.io/job/portfolio-erik-kooijman-applied-cyber-email-security-detection-engineering","title":"Applied Cyber, Email Security (Detection Engineering)","company":{"id":348219,"name":"Portfolio Erik Kooijman","domain":"doppel.dev","url":"https://alion.io/company/doppel","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":70,"open_postings":22,"ghost_share":0.5,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":120000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Google Workspace","optional":true},{"name":"LLM","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-09-15T13:24:50Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-11-05T06:39:44Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":50},"description":"About Doppel\nDoppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help some of the world’s most recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. By unifying Digital Risk Protection, Human Risk Management and Email Security, Doppel connects threats into a real-time intelligence graph to power faster disruption, smarter defense, and modern security awareness at scale.\nBacked by leading investors including Andreessen Horowitz and Bessemer Venture Partners, and trusted by leading enterprises, Doppel is a rapidly growing Series C startup building the future of social engineering defense. Our team combines deep cybersecurity expertise, operational rigor, and startup velocity to solve some of the internet’s most urgent trust and safety challenges.\nAt Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates.\nThe Role\nYou’ll investigate the hardest email threats and detection failures, then turn what you learn into detections, evals, AI behavior, and product capabilities that scale across every Doppel customer. As our technology learns to handle today’s problems, you’ll move up the complexity curve to solve the next ones.\nWhat You Will Do\nOwn detection problems end-to-end - from emerging TTP or FN → investigation → detection hypothesis → validation → production coverage → measurement.\n\nUse AI as a force multiplier - build evals, supervise model behavior, use coding agents aggressively, and automate repetitive investigative work.\n\nPartner with Product and Engineering on signals, detection logic, edge cases, and validation.\n\nWork with customers and GTM on detection gaps, real-world TTPs, and platform behavior.\n\nTurn tooling, threat-intelligence partnerships, and provider relationships into new signals and detection capabilities.\n\nRequired Qualifications\nBring deep practitioner judgment from one or more of detection engineering, SOC/IR, threat intelligence/OSINT, or email/messaging security; range across multiple areas is a major plus.\n\nTake messy detection failures from “something’s off” to root cause - prove what matters in the data and turn FP/FN cases into durable fixes.\n\nThink like both attacker and defender across phishing, BEC, impersonation, credential theft, ATO, and evolving social-engineering TTPs.\n\nTurn expert judgment into detection logic, evals, tests, requirements, and systems that scale beyond a single investigation or customer.\n\nThrive at the intersection of security, AI, product, and customers - challenge assumptions, use coding/AI agents aggressively, and move fast through ambiguity.\n\nNice to Have\nSEG/email-security depth: SPF, DKIM, DMARC, headers, mail flow, and sender identity.\n\nExperience with M365/Exchange Online, Google Workspace, or email-security APIs.\n\nDetection-as-code, eval datasets/labeling, model benchmarks, or LLM/ML security systems.\n\nBuilt agentic security workflows, autonomous triage, or LLM evaluation systems.\n\nExperience with Agentic SOC, SIEM/TI tooling, and threat-intelligence provider/vendor partnerships.\n\nWhy This Role\nShape the product, not just operate it. You work on real emerging attacks and turn practitioner judgment into detections, AI behavior, and product capabilities alongside Product, Engineering, AI/ML, customers, and ecosystem partners.\n\nWhy Join Doppel\nCompensation: $120,000-$180,000 OTE, based on location, experience, and demonstrated expertise\n\nMeaningful equity so you share in Doppel's success\n\nRemote-first culture\n\nFlexible PTO, comprehensive health benefits, parental leave, and more\n\nA high-growth environment where your work has immediate technical and customer impact\n\nJoin Doppel\nDoppel is the first platform built to dismantle digital deception at scale. We scan over 150 billion entities daily and deploy continuously adaptive AI SOC agents, paired with expert human analysts, to uncover and disrupt the infrastructure behind phishing, impersonation, and online fraud before attacks can spread. Our Threat Grid turns every customer signal into shared intelligence, making each disruption smarter, faster, and more effective.\nWe’re not just another cybersecurity company. We’re defining the future of social engineering defense, where trust is protected, and deception becomes unprofitable. Backed by top-tier investors and trusted by some of the world’s most recognized brands, Doppel is growing fast. If you’re driven to solve real-world problems with bold technology, we’d love to meet you.","description_format":"text","description_chars":4856,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Email Security"],"lifecycle":[{"event":"open","at":"2026-09-15T19:46:44Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.382,"p_room":0.45,"age_days":50,"expected_fill_days":27,"reasons":["conf:4","stale_co","velocity","win:tail"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/portfolio-erik-kooijman-applied-cyber-email-security-detection-engineering","json_url":"https://alion.io/job/portfolio-erik-kooijman-applied-cyber-email-security-detection-engineering.json","meta":{"generated_at":"2026-11-05T11:45:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15056,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":348219},"rest":"https://alion.io/mcp/rest/get_company?id=348219"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fportfolio-erik-kooijman-applied-cyber-email-security-detection-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fportfolio-erik-kooijman-applied-cyber-email-security-detection-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fportfolio-erik-kooijman-applied-cyber-email-security-detection-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/portfolio-erik-kooijman-applied-cyber-email-security-detection-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fportfolio-erik-kooijman-applied-cyber-email-security-detection-engineering"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":944061}},{"tool":"search_jobs","arguments":{"company":"doppel.dev","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":944061},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}