--- title: 'Senior Product Security Engineer at Doppel' canonical: 'https://feeny.ai/job/senior-product-security-engineer-doppel-united-states-db0f64bvy30f' type: 'job' last_seen: '2026-10-15' --- # Senior Product Security Engineer at Doppel - **Company:** Doppel - **Location:** United States - **Compensation:** $175k–$200k - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-09-25 - **Last confirmed live:** 2026-10-15 - **Apply:** https://jobs.ashbyhq.com/doppel/1629673f-8d4b-4955-81cf-07d12defe77a ## Job description ## Why Join Doppel Doppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help some of the world’s most recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. By unifying Digital Risk Protection, Human Risk Management and Email Security, Doppel connects threats into a real-time intelligence graph to power faster disruption, smarter defense, and modern security awareness at scale. Backed by leading investors including Andreessen Horowitz and Bessemer Venture Partners, and trusted by leading enterprises, Doppel is a rapidly growing Series C startup building the future of social engineering defense. Our team combines deep cybersecurity expertise, operational rigor, and startup velocity to solve some of the internet’s most urgent trust and safety challenges. ## The Role At Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates. We’re looking for a Product Security Engineer to support and scale our product and cloud security efforts by embedding security into engineering workflows and serving as a subject matter expert on all things security. The candidate will partner closely with engineering teams to conduct architecture reviews, design secure solutions to complex problems, improve and maintain our tooling (both first and third-party) and guardrails, and help design a well-rounded security program in a world where code gets written by AI and velocity is ever increasing. In addition to hands-on execution, the role emphasizes enablement providing guidance, documentation, and mentorship to engineers, along with clear communication and reporting to security leadership. This role is open remotely across the U.S. and Canada, or hybrid from our New York, San Francisco, or Toronto office. ## What You Will Do - Partner with product and engineering teams on architecture reviews, threat modeling, and secure design, translating complex security risks into practical recommendations and clear tradeoffs. - Evaluate and roll out AI-assisted and agentic security workflows to increase security coverage and accelerate reviews, triage, and remediation, with appropriate validation and human oversight. - Improve and maintain our first- and third-party security tooling, including our in-house ASPM platform, to reduce noise, improve prioritization, and make findings easier for engineering teams to act on. - Strengthen security controls throughout the SDLC and CI/CD pipeline, including code and dependency scanning, software supply chain protections, and safeguards for AI-assisted development, without introducing unnecessary friction. - Serve as a GCP security subject matter expert, advising engineering teams on secure patterns for networking, data protection, secrets management, workload runtimes, and logging and monitoring. - Partner with infrastructure and engineering teams to implement least-privilege IAM, secure workload identities, and durable security guardrails through policy and infrastructure-as-code. - Drive vulnerability management from triage through resolution: validate findings, assess risk, establish ownership, track remediation against SLAs, and document exceptions and risk acceptance. - Coordinate penetration testing engagements, including vendor selection, scoping, testing logistics, findings validation, and remediation and retesting with engineering teams. - Help shape and scale our product security program by identifying gaps, prioritizing improvements, and communicating risk, progress, and outcomes to security leadership. - Enable engineers to make sound security decisions through practical documentation, reusable guidance, targeted training, and mentorship that keeps pace with how teams build and ship. ## What We Are Looking For - 5–7 years of experience in product security, cloud security engineering, software development or a related field. - Practical experience applying AI and agentic workflows to accelerate security reviews, vulnerability triage, and remediation, with a strong understanding of the security risks associated with AI-assisted development. - Strong knowledge of Google Cloud Platform (GCP) services and security best practices, including IAM, networking, data protection, and workload runtimes. - Hands-on experience with penetration testing coordination, threat modeling, and risk assessment. - Demonstrated proficiency in Python and cloud-native programming or scripting languages to design and maintain security automation, policy enforcement, and continuous compliance controls using Infrastructure as Code. - Familiarity with designing and enforcing least-privilege IAM and conducting access reviews. - Ability to communicate security risks and recommendations clearly to engineering and leadership audiences. ## Why Join Doppel - $175,000 - $200,000 USD. Compensation for candidates based in Canada will be aligned to our Canadian compensation bands and may differ based on location. - Meaningful equity so you share in Doppel’s success - Remote-first culture with flexibility built in - Quarterly offsites and frequent opportunities to travel to our offices - Flexible PTO, comprehensive health benefits, parental leave, and more - A high growth environment where your work has immediate impact and visibility Join Doppel Doppel is the first platform built to dismantle digital deception at scale. We scan over 150 billion entities daily and deploy continuously adaptive AI SOC agents, paired with expert human analysts, to uncover and disrupt the infrastructure behind phishing, impersonation, and online fraud before attacks can spread. Our Threat Grid turns every customer signal into shared intelligence, making each disruption smarter, faster, and more effective. We’re not just another cybersecurity company. We’re defining the future of social engineering defense, where trust is protected, and deception becomes unprofitable. Backed by top-tier investors and trusted by some of the world’s most recognized brands, Doppel is growing fast. If you’re driven to solve real-world problems with bold technology, we’d love to meet you. ## About Doppel ## Company Overview - **One-liner**: Doppel is an AI-native platform for social engineering defense, protecting organizations from AI-powered impersonation, phishing, fraud, and multi-channel attacks. - **Entity Type**: Private (Series A/B stage) - **Headquarters**: New York, NY, USA - **Founded**: 2022 - **Founders**: Not publicly disclosed on company materials ## Core Business - **Primary industry/industries**: Cybersecurity (Social Engineering Defense, Digital Risk Protection, Email Security) - **Target customers**: B2B — Security Operations Centers (SOCs), enterprise security teams, executive leadership - **Mission or purpose statement**: "Protecting the world from social engineering attacks every day." ## Products & Services - **Digital Risk Protection (DRP)**: Detects and eliminates external threats across social media, domains, marketplaces, and beyond, using autonomous action to disrupt attacks before they reach executives, customers, or revenue. - **Human Risk Management**: Strengthens employees against real attacker tactics (deepfakes, vishing, multi-channel pretexting) via training and simulation. - **Email Security**: Agentic detection and response powered by the Doppel Threat Graph — catches what traditional filters miss and stops campaigns in their tracks. - **Phishing Triage**: Uses agentic AI to turn employee-reported signals into machine-speed remediation and defense. - **Security Awareness Training**: Tailored, deepfake-enabled, threat-informed training and personalized coaching. - **Simulation**: Realistic phishing simulations that reveal real vulnerabilities and build response readiness. - **Executive Protection**: Continuous monitoring of personal data exposure and threat activity across open and dark channels for high-risk leaders. - **Brand Protection**: Continuous detection and disruption of impersonation and fraudulent activity across digital channels. ## Market Standing - **Valuation/Total Funding**: Not disclosed. Backed by prominent investors including **Bessemer Venture Partners**, **Andreessen Horowitz (a16z)**, **Amex Ventures**, **NTT DOCOMO Ventures**, **Strategic Cyber Ventures**, **9Yards Capital**, **Sozo Ventures**, **SVAngel**, and others. - **Key Metric**: Private company — revenue not publicly available. Notable headcount and partnership signals indicate strong growth. - **Notable Investors/Partners**: Also backed by George Kurtz (CEO, CrowdStrike), Aurum Partners, Script Capital, South Park Commons. Official partner of the **New York Knicks**. - **Growth Signals**: - Launched Agentic Email Security solution (June 2026) - Entered the Japanese market (2026) marking next phase of global expansion - Hired former Varonis Systems and Vectra AI executive as SVP of Customer Success (2026) - Headcount growing; active hiring across multiple roles - Partnerships with major venture funds and a major sports franchise ## Competitive Advantages - **AI-native unified platform** combining Digital Risk Protection, Human Risk Management, and Email Security — competitors often offer siloed solutions. - **Doppel Threat Graph**: Graph-driven intelligence continuously ingests billions of signals, linking disparate incidents into a single attack story, enabling faster, more accurate detection. - **Agentic AI automation**: Autonomous disruption of attacker infrastructure, not just detection — allows SOC teams to scale without adding headcount. - **Multi-channel coverage**: Detects, connects, simulates, and trains against threats across domains, social media, ads, telco, dark web, crypto, and more. - **Backed by top-tier cybersecurity and enterprise investors** (a16z, Bessemer, CrowdStrike CEO), lending credibility and strategic connections. ## Strategic Focus - **Global expansion**: Entered Japan in 2026, with likely further international growth. - **Product expansion**: Moving from DRP/human risk into email security, creating a fully unified platform. - **Agentic AI leadership**: Double-down on autonomous, AI-driven threat disruption to differentiate from legacy security vendors. - **Enterprise and executive protection**: Growing focus on protecting high-value targets (executives, brands) against sophisticated, AI-powered impersonation. ## Why Work Here - **Engineering culture**: Engineers are described as "united by a passion for solving complex security challenges with AI." Emphasis on curiosity, teamwork, ownership, and solving "deeply technical problems every single day." - **Remote & hybrid flexibility**: Most of the team works fully remote. Engineers have the option for in-person collaboration **3 days per week** in either the **New York** or **San Francisco** offices. - **Fast-paced environment**: Culture values "Move Really Really Fast" and "execution speed." Employees report the company moves "significantly faster" than previous companies. - **Values-driven culture**: Core values include "Win as a Team," "Customer Obsession," "Break Through Walls," and "over-communicate." - **Benefits**: - Flexible time off - Home office setup stipend - Health benefits - Cell phone stipend - Paid parental leave - Perks for office days (food, commuting support) - **Career growth**: Engineers report quick growth — e.g., founding engineer to Engineering Manager path. Leadership emphasizes valuing team member perspectives and enabling growth. - **Mission-driven**: Protecting the internet and making it safer is a core motivator for the team. ## Sources 1. [doppel.com](https://www.doppel.com/) 2. [doppel.com/company/about-us](https://www.doppel.com/company/about-us) 3. [doppel.com/company/careers](https://www.doppel.com/company/careers) 4. [jobs.ashbyhq.com/doppel](https://jobs.ashbyhq.com/doppel) ## Other roles at Doppel - [Software Engineer, Email](https://feeny.ai/job/software-engineer-email-doppel-san-francisco-egrnxkrw05j3) — San Francisco, CA - [Director, Governance, Risk & Compliance](https://feeny.ai/job/director-governance-risk-compliance-doppel-united-states-5pksfdp39jrx) — United States - [Technical Recruiter, Applied Cyber & Security](https://feeny.ai/job/technical-recruiter-applied-cyber-security-doppel-san-francisco-aayexxrrkzzx) — San Francisco, CA - [Deployment Lead, FDE (TOR)](https://feeny.ai/job/deployment-lead-fde-tor-doppel-toronto-8ft9kevnr37g) — Toronto, Canada - [Deployment Lead, FDE (SF)](https://feeny.ai/job/deployment-lead-fde-sf-doppel-san-francisco-rj05wqrv7vfp) — San Francisco, CA - [Applied Cyber, Email Security (Detection Engineering)](https://feeny.ai/job/applied-cyber-email-security-detection-engineering-doppel-united-states-654d539p4kwq) — United States - [Frontend Engineer, Platform](https://feeny.ai/job/frontend-engineer-platform-doppel-san-francisco-mt05xhzvr21e) — San Francisco, CA - [Deployment Lead, FDE](https://feeny.ai/job/deployment-lead-fde-doppel-new-york-8er37qsycfnc) — New York, NY - [Applied Cyber, Detections](https://feeny.ai/job/applied-cyber-detections-doppel-united-states-08grgjandq6s) — United States - [Forward Deployed Engineer (SF)](https://feeny.ai/job/forward-deployed-engineer-sf-doppel-san-francisco-4fs45d3pep4e) — San Francisco, CA