RefolkCandidates
Open nowSalesSolutions Architect - Detections

Solutions Architect, Detections

Doppel · United States

Location
United States
Workplace
Remote
Employment
Full time
Posted
2 months ago

About this role

About Doppel

Doppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help some of the world’s most recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. By unifying Digital Risk Protection, Human Risk Management and Email Security, Doppel connects threats into a real-time intelligence graph to power faster disruption, smarter defense, and modern security awareness at scale.

Backed by leading investors including Andreessen Horowitz and Bessemer Venture Partners, and trusted by leading enterprises, Doppel is a rapidly growing Series C startup building the future of social engineering defense. Our team combines deep cybersecurity expertise, operational rigor, and startup velocity to solve some of the internet’s most urgent trust and safety challenges.

The Role

At Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates.

We are looking for a Solutions Architect, Detections to improve detection workflows, conduct ad hoc OSINT investigations, and support key customer implementations. You will optimize intelligence sourcing and brand abuse detection capabilities, partner with Product and Engineering teams, and help drive scalable platform improvements.

What You Will Do

  • Support post sales detection operations for customers by translating risk, brand abuse, and phishing use cases into effective and scalable detection coverage across website domains, SOCMINT, and other related surface areas.

  • Conduct onboarding, detection logic implementation, and sourcing workflows for select customers.

  • Build, refine, and validate platform automation logic using proprietary frameworks to support alert triaging and movements.

  • Investigate and conduct root cause analyses (RCAs) for missed detections, false positives, false negatives, improper alert movements, and low volume customers.

  • Work alongside Customer Success Managers (CSMs), Account Executives (AEs), and Technical Account Managers (TAMs) to support ad hoc detection requests and platform configurations.

  • Collaborate cross functionally with Engineering, Product, and other Solutions Architecture teams to surface platform limitations, share detection findings, and contribute ideas for process improvements.

  • Stay up to date with trends, patterns, and evolving TTPs related to agentic phishing, credential theft, recruitment scams, social media impersonation, disinformation, and paid ads abuse.

What We Are Looking For

  • 3+ years of experience in OSINT investigations, threat intelligence, or detections engineering.

  • 1+ years of experience conducting SOCMINT investigations.

  • Experience using URL intelligence platforms and constructing complex queries (for example, URLScan, VirusTotal, or Spamhaus).

  • Demonstrated knowledge of common phishing and credential theft TTPs.

  • Demonstrated knowledge of common social media, paid ad, and SERP abuse patterns.

  • Strong ability to support ad hoc customer requests and collaborate in cross functional discussions with Product and Engineering teams.

  • Excellent written and verbal communication skills in English.

Nice to Have

  • A degree in cybersecurity, information assurance, intelligence studies, or data analytics.

  • Experience creating advanced SERP queries (Google dorks).

  • Experience using, building, or supporting agentic workflows beyond answer and response interactions (for example, Claude Code, Codex, OpenClaw, or self hosted LLM agents).

  • Experience using Python for automation.

  • Experience using Google Workspace.

  • Experience using Jira or Linear.

Why Join Doppel

  • Compensation: $75,000 to $90,000 OTE based on location and relevant experience.

  • Meaningful equity so you share in Doppel’s success.

  • Remote first culture.

  • Flexible PTO, comprehensive health benefits, parental leave, and more.

  • A high growth environment where your work has immediate impact and visibility.

Join Doppel

Doppel is the first platform built to dismantle digital deception at scale. We scan over 150 billion entities daily and deploy continuously adaptive AI SOC agents, paired with expert human analysts, to uncover and disrupt the infrastructure behind phishing, impersonation, and online fraud before attacks can spread. Our Threat Grid turns every customer signal into shared intelligence, making each disruption smarter, faster, and more effective.

We’re not just another cybersecurity company. We’re defining the future of social engineering defense, where trust is protected, and deception becomes unprofitable. Backed by top-tier investors and trusted by some of the world’s most recognized brands, Doppel is growing fast. If you’re driven to solve real-world problems with bold technology, we’d love to meet you.

As published by Doppel. Applications are handled on their site.

Skills this posting mentions

Solution ArchitectureAnalyticsSocial Media

About Doppel

In the era of AI, knowing what’s real is harder than ever. Social engineering threats are sophisticated, multi-channel campaigns. They lurk in your inbox, compromise your email channels, and weaponize fake profiles across social networks to deceive and defraud your people and your brands. Doppel is the agentic social engineering defense platform built to fight AI with AI. Unlike traditional systems that stop at detection and inbox scoring, Doppel delivers real-time disruption. We secure the inbox while executing automated takedowns on malicious sending infrastructures, lookalike domains, and rogue profiles at machine speed. By unifying Digital Risk Protection, Human Risk Management, and Email Security onto a single centralized platform, Doppel shuts down threats at their source. We safeguard every channel, move faster than attack speed, and turn global threat intelligence into a compounding network effect that keeps you ahead of the curve. Backed by Bessemer Venture Partners, a16z, George Kurtz - CEO, CrowdStrike, South Park Commons, Strategic Cyber Ventures, Aurum Partners, a group of athlete investors led by WNBA players Nneka Ogwumike, Breanna Stewart, and Kelsey Plum, who joined the round through the a16z Cultural Leadership Fund, Script Capital, 9Yards Capital, Sozo Ventures, NTT DOCOMO Ventures, and SVAngel.

All 18 openings at Doppel

One click, then it is written

Apply to Doppel with a resume written for this role.

Queue Solutions Architect, Detections and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Doppel’s form for you.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • 25 sent a week, free
  • No card
  • Nothing sent until you say so

More roles at Doppel

See all

Similar roles elsewhere

See more

Put this to work

Paste your career in once. Every application after that is written for you.

Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • New matches ranked and written before you are up.
  • Every bullet stays inside what your history supports. Nothing invented.
  • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

500 free credits on sign-up. No card. Nothing is sent until you say so.

Listed from the job board Doppel publishes. Refolk is not the employer and does not handle their hiring. Applications go to Doppel directly.