Full-Time

Software Engineer

Detection

Posted on 9/13/2025

Doppel

Doppel

201-500 employees

AI-driven digital risk protection against phishing

Compensation Overview

$135k - $300k/yr

+ Equity

San Francisco, CA, USA + 1 more

More locations: New York, NY, USA

Hybrid

Three days on-site per week required; offices in SF and NYC.

Category
Software Engineering (1)
Required Skills
Python
React.js
Postgres
GraphQL
TypeScript
Google Cloud Platform
Requirements
  • Proficiency in Python, PostgreSQL, data pipelines
  • Experience with Google Cloud
  • Experience with AI models
  • Frontend experience with ReactJS, GraphQL, and TypeScript
  • Ability to work in-person in San Francisco or New York City, three days a week
Responsibilities
  • Collaborate on building an AI-native social engineering defense platform
  • Contribute to backend development across Python, PostgreSQL, data pipelines on Google Cloud and AI models
  • Contribute to frontend development using ReactJS, GraphQL, and TypeScript
  • Work on scalable systems monitoring billions of entities and deploying AI agents to identify and neutralize digital threats
Desired Qualifications
  • Strong evidence of outstanding ability and hustle
  • Experience working on customer-obsessed, high-performing teams
  • Experience in cybersecurity or AI-native defense is a plus

Doppel delivers AI-powered digital risk protection to detect and disrupt phishing and brand cyber attacks. Its subscription-based platform integrates with existing security operations to monitor brands’ online presence in real time, identify threats, and support rapid takedowns. The service targets enterprises seeking robust brand protection and seamless security integration. Doppel differentiates itself through fast threat disruption, strong customer service, and an emphasis on operational efficiency. The goal is to safeguard online identities and brand integrity by proactive threat management and real-time defense across large-scale brands.

Company Size

201-500

Company Stage

Series B

Total Funding

$54.4M

Headquarters

San Francisco, California

Founded

2022

Simplify Jobs

Simplify's Take

What believers are saying

  • 3x ARR growth and 5x Fortune 500 customers drive $70M Series C valuation over $600M.
  • Ciaran Martin and Natasha Mohanty hires accelerate EMEA expansion and engineering scale.
  • Symbiosys partnership combats deepfake scams in South Africa.

What critics are saying

  • CrowdStrike bundles social engineering detection into Falcon, eroding Doppel's edge in 6-12 months.
  • Microsoft commoditizes Teams Simulations via Defender in 12-18 months.
  • Proofpoint undercuts with mature sales and 10x customer base in 12-24 months.

What makes Doppel unique

  • Doppel unifies digital risk protection and human risk management against multi-channel impersonations.
  • Agentic AI builds real-time threat graphs for automated takedowns of deepfakes and phishing.
  • AI Content Builder generates custom, company-branded training in minutes.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Company Equity

Growth & Insights and Company News

Headcount

6 month growth

-2%

1 year growth

-3%

2 year growth

0%
ITWeb
Mar 23rd, 2026
When anyone can fake anyone: how SA is tackling the deepfake surge.

When anyone can fake anyone: how SA is tackling the deepfake surge. Deepfake-enabled scams are becoming harder to spot, especially when they imitate executives, colleagues or trusted brands. Businesses need early insight into these synthetic threats by tracking impersonation activity across the web and surfacing it while it still has limited reach. Deepfakes bypass technical safeguards entirely by targeting human trust. Over the past several months, deepfakes and identity cloning have moved from a fringe novelty to one of the most serious cyber security concerns facing South African organisations. What began as simple voice mimicry has escalated into convincing video impersonations, cloned social media profiles, fabricated ads and co-ordinated multi-channel scams. These attacks are no longer limited to state-sponsored adversaries or high-end cyber crime groups, either. With widely accessible AI tools, anyone can now generate realistic impersonations of executives, brands or employees in minutes. This shift has caught many organisations unprepared. Conventional security controls were built to stop malware, intrusions or network abuse, not AI-generated deception that looks and sounds legitimate. Deepfakes bypass technical safeguards entirely by targeting human trust. The impact is immediate and severe. Fraudulent payment requests appear to come from real executives. Customers are directed to cloned websites that look indistinguishable from legitimate portals. Staff engage with fake internal messages or outreach from what appears to be the company's own leadership team. The attack surface is no longer the network. It is the organisation's identity. Doppel, now partnered with Symbiosys, is approaching this problem from the ground up. Doppel unifies digital risk protection and human risk management to stop digital threats before they scale and empower teams to lead the defence. Doppel's AI-native social engineering defence platform is purpose built to counter the multi-channel impersonation techniques that attackers rely on today and continuously monitors for spoofed domains, fake profiles, malicious ads and impersonation attempts across the public web, social channels, forums, apps and messaging platforms. This matters because deepfake-enabled attacks rarely occur in isolation. A cloned LinkedIn profile links to a fake recruiting e-mail. A spoofed domain supports a fraudulent vendor invoice. A deepfake voice message amplifies social proof. The power of Doppel's approach is that it unifies these signals rather than treating them as independent incidents. Through early and actionable alerts, organisations can respond to emerging impersonation campaigns before they escalate into financial loss, reputational damage or customer exploitation. Andy Fidgeon, International Channel Manager at Doppel, explains: "Attackers are no longer breaking into networks first. They are breaking into identities. Cloned profiles, spoofed domains and fabricated ads create a level of credibility that traditional security tools were never built to detect." For security leaders, this represents a critical evolution in defensive strategy. Patrick Assheton-Smith, CEO of Symbiosys IT, adds: "Most businesses simply do not have the tooling or visibility to detect identity cloning at scale. The attacks are too fast, too personalised and too distributed across digital channels to manage manually. By using an AI-native approach that understands how modern impersonation attacks spread, Doppel allows organisations to operate with the same speed and awareness as the threat actors targeting them." The relevance for South African organisations cannot be overstated. Many operate with lean security teams and rely heavily on trust-based communication channels with customers and suppliers. Deepfake-driven attacks exploit that trust directly. Fraudsters do not need to breach infrastructure if they can convincingly imitate the people or brands involved. A platform capable of identifying and dismantling these impersonation pipelines in real time provides a meaningful layer of protection in an environment where digital trust has become the primary currency. Symbiosys' partnership with Doppel aims to bring this capability into the hands of local businesses at a time when the threat is accelerating faster than awareness. With every major organisation now vulnerable to AI-driven impersonation, the need for a unified social engineering defence platform has become immediate rather than theoretical. Deepfakes are no longer a preview of future risk. They are already shaping the present. For organisations looking to protect their customers, staff and brand from the new wave of AI-powered social engineering, Doppel offers a practical and proactive path forward. Editorial contacts Patrick Assheton-Smith

Doppel Inc
Mar 19th, 2026
Introducing Doppel's New AI Content Builder.

Introducing Doppel's New AI Content Builder. Attackers are personalizing. Is your training? See how Doppel's new AI Content Builder helps you create custom, company-branded training in minutes, not weeks. March 19, 2026 * The End of the Generic Security Module: Introducing Doppel's New AI Content Builder * From Generic Modules to Organization-Specific Training * Custom Content Built for How Modern Social Engineering Evolves The End of the Generic Security Module: Introducing Doppel's New AI Content Builder. Today's social engineering attacks are highly contextual. They reference internal tools, mimic real vendors, exploit active projects, and tailor messaging to specific roles. An accounts payable specialist receives a payment redirection request aligned to current vendor workflows. An engineer is targeted with MFA fatigue prompts during an active deployment. An executive assistant is contacted with a calendar pretext tied to a real leadership offsite. Attackers personalize by default. Most awareness programs do not. When training content remains generic, it fails to prepare employees for the scenarios they will actually encounter in their specific role, department, or company. It becomes a compliance artifact rather than an operational defense layer. To address modern risks, awareness must be threat-informed, environment-specific, and continuously adaptable. Doppel's Security Awareness Training solution was built to address that need with tailored, relevant training content for every situation. Today, Doppel is extending that approach by allowing companies to create organization-specific content with its new AI Content Builder. In just a few clicks, teams can create custom, company-branded training on any topic: from emerging attack patterns to internal policies or new tools. Security teams can go from idea to deployed training in minutes, not weeks. From Generic Modules to Organization-Specific Training. Security awareness training has long operated on a simple assumption: Standardized education at scale reduces human risk. That approach made sense when compliance requirements were the primary driver of programs. A library of generic phishing examples, password hygiene reminders, and annual certification modules was considered sufficient. But that's no longer how risk manifests inside organizations. Doppel's Security Awareness Training was designed around a simple principle: Effective education mirrors real attack patterns. Its content library includes hundreds of threat-informed videos and interactive courses built on modern social engineering tactics, from credential harvesting and MFA manipulation to vendor impersonation and executive targeting. Organizations can incorporate their own branding into prebuilt courses, align visual identity with internal standards, and deploy content that feels embedded within their environment rather than outsourced to a third party. But even the most comprehensive library cannot anticipate every organization's unique workflows, milestones, policies, or risk priorities. Security leaders consistently face moments where tailored content is required, whether reinforcing a new policy, addressing a spike in a specific attack pattern, or responding to industry-specific campaigns. Historically, creating custom awareness content for those moments meant expensive production cycles, external vendors, or significant internal effort. Doppel's AI Content Builder changes that. What once required weeks of coordination can now be done in minutes, directly within Doppel. Now, organizations can generate high-quality, custom training in just a few clicks. Security teams define the topic or training objective, set the desired length and visual identity, and incorporate company-specific source material, including internal policies or procedural guidance. Doppel then generates an outline of the course, detailing each lesson and associated components. Customers can review the outline and make adjustments to ensure the course aligns with their needs. The result is tailored, threat-informed content aligned to the organization's environment, brand, and risk landscape. Instead of adapting your risk to fit static content, you create content that fits your risk. What was once complex and time-consuming can now be done in minutes. Custom Content Built for How Modern Social Engineering Evolves. Attackers iterate quickly. They test new pretexts, exploit emerging technologies, and refine psychological tactics in real time. Security awareness programs must be able to respond with the same agility. Security teams looking to stay ahead of the latest attacker tactics need to move quickly, iterate easily, and deploy training as threats evolve. Doppel's AI Content Builder enables security leaders to operationalize that responsiveness at scale. If a new wave of AI-driven voice phishing targets your industry, you can deploy a focused training module specific to that tactic the same day. If your organization rolls out new identity verification procedures, you can reinforce them with customized awareness content tied directly to your internal language and workflows. If a specific company announcement increases exposure to targeted attacks, you can proactively spin up a course to warn your employees to be vigilant in near-real time. The goal is not simply engagement. It is behavioral relevance. When users see scenarios that reflect their everyday tools, their actual policies, and the threats targeting their sector, training becomes credible. Credibility drives retention. Retention drives resilience. Security awareness should not be static or detached from the realities of your environment. It should evolve alongside your threat landscape and reinforce the controls, policies, and workflows unique to your organization. Doppel's Security Awareness Training provides the threat-informed foundation. AI Content Builder extends it, giving security leaders the ability to create tailored, organization-specific training on demand. Because reducing human risk requires more than broad education, it demands personalization and agility. It requires precision. AI Content Builder is available today within Doppel's Security Awareness Training platform. To see how tailored awareness and custom training can strengthen your human risk posture, meet with its team.

Doppel Inc
Mar 9th, 2026
Human Risk Management beyond the inbox: introducing Microsoft Teams Simulations.

Human Risk Management beyond the inbox: introducing Microsoft Teams Simulations. Doppel is introducing Microsoft Teams Simulations - a new channel in Doppel's Human Risk Management solution designed to help organizations measure and reduce risk across the same collaboration surfaces attackers are actively targeting. March 9, 2026 * The Rise of Collaboration-Led Attacks * Training in the Tools Employees Trust Most * Ready-to-Launch Scenarios That Test Every Angle * Built for How Modern Social Engineering Operates For years, the inbox has been the center of gravity for security awareness programs. That made sense when most phishing attacks started and ended with an email. But that's no longer how breaches unfold. Today's social engineering attacks move laterally across channels, now spanning workplace tools. A calendar invite leads to a call. A call leads to an MFA prompt. A verification email arrives mid-conversation. In less than ten minutes, a routine-looking meeting can turn into an account takeover. When simulations only test one channel, they miss how risk actually manifests. That's why Doppel is introducing Microsoft Teams Simulations - a new channel in Doppel's Human Risk Management solution designed to help organizations measure and reduce risk across the same collaboration surfaces attackers are actively targeting. See the feature in action. The Rise of Collaboration-Led Attacks. Workplace communication platforms were built for speed and trust. A meeting invite from IT support to troubleshoot a tech issue. A Teams call from the payroll department about a direct deposit hiccup. A compliance review scheduled on your calendar. These interactions feel operational. Internal. Expected. That's exactly why they work. Threat actors have increasingly shifted their focus to collaboration platforms. Instead of sending a suspicious link, they send a legitimate-looking meeting invite. Instead of relying on static phishing pages, they use live voice conversations to establish authority and urgency. Instead of attacking one surface, they combine multiple - first hitting inboxes, then following up with a call offering to "help." Calendar-based attacks introduce an additional blind spot. Meeting invites often originate from legitimate infrastructure and can bypass traditional email authentication checks. Even when security tools flag an email, the calendar event itself may persist. The result is a security exposure that technology alone cannot fully solve. Only internal defenses, built through specific training and realistic simulations, can close that gap. Training in the Tools Employees Trust Most. Many voice phishing attacks rely on phone calls to personal devices. They exploit users outside their work environment, where there is no requirement to respond, and some even screen calls from unknown numbers. Attacks that target collaboration tools happen entirely within the enterprise ecosystem. The meeting invite lands in Outlook. The notification appears on a managed device. The call takes place inside Microsoft Teams. The interaction unfolds during the workday, in a platform employees trust. These collaboration tools feel safe by default. That context matters. It shapes how employees respond when attackers prey on professional courtesy, collaboration, and a workplace setting. Microsoft Teams Simulations: Multi-Channel by Design With Microsoft Teams Simulations, security teams can now design campaigns that reflect this modern attack chain directly within Doppel's Human Risk Management solution. Using its vibe phishing simulation capability, admins simply describe the scenario they want to test in natural language. Doppel generates the campaign - including the meeting pretext, messaging, voice agent, and live interaction flow. From the employee's perspective, the experience feels legitimate. A target receives a Teams meeting invite in Outlook from what appears to be a legitimate user, maybe from IT Support, payroll, or compliance. The context is plausible. The timing feels urgent. When they dial into the meeting, an AI voice agent joins them. The agent introduces themselves using the predefined persona. The conversation unfolds naturally: not from a static script, but through dynamic AI dialogue. The agent then discreetly attempts to socially engineer the target into disclosing credentials, approving MFA prompts, or sharing sensitive information. Here's an example of a Teams email with an associated meeting invitation and a call with an agent (which, at the surface, looks just like the real thing): Everything, from the calendar invite to the voice interaction, is tracked and measured within a single campaign. For security leaders, this means visibility into how users respond across collaboration surfaces, not just whether they click links. Microsoft Teams Simulations surface behavioral risk that would otherwise remain invisible in email-only programs. Ready-to-Launch Scenarios That Test Every Angle. Real attackers rely on sequences, not single moments. They establish trust in one channel, then weaponize it in another. They adapt in real time if they encounter resistance. Now, your simulations can mirror that behavior. Microsoft Teams Simulations test layered behavior. First, does the employee scrutinize the meeting invitation? Do they question the sender and the context before joining? Second, once inside the call, can they recognize live social engineering - urgency, authority, procedural language, and subtle pressure designed to override skepticism? Microsoft Teams Simulations are available to Doppel Human Risk Management customers with 30 ready-to-use templates based on real-world social engineering scenarios, including IT credential verification, MFA resets, payroll corrections, compliance audits, vendor onboarding calls, and executive briefings. Security teams can even extend scenarios further, sending a verification email mid-call or referencing an MFA prompt during the conversation, to replicate the multistep chains used in modern breaches. Instead of testing isolated awareness, you're evaluating resilience across an evolving interaction. The result is training that reflects real risk, not generic hypotheticals. Built for How Modern Social Engineering Operates. Attackers have already evolved beyond single-channel phishing. They combine calendar invites with voice calls. They chain collaboration tools with inbox follow-ups. They build credibility before attempting exploitation. Effective Human Risk Management has to mirror that reality. With Microsoft Teams Simulations, organizations can test and measure resilience across multiple attack surfaces in one cohesive campaign - inside the tools employees use every day. Because the goal isn't to simulate yesterday's phishing email. It's to prepare for how attacks actually happen. For organizations serious about understanding and reducing human risk across the full attack surface, collaboration channels can't be an afterthought. Microsoft Teams Simulations are available at an additional cost to Doppel Human Risk Management customers. To learn more and see the feature live, book a demo.

PR Newswire
Feb 3rd, 2026
UK National Cyber Security Centre founder joins Doppel as strategic advisor

Doppel, an AI-powered social engineering defence platform, has appointed Ciaran Martin, founder and first CEO of the UK's National Cyber Security Centre, as strategic advisor. Martin, a 23-year veteran of UK Government who worked under five Prime Ministers, will guide Doppel's international strategy and EMEA expansion. The appointment follows Doppel's recent hiring of Steve Murphy, former Tanium EMEA Senior Vice President, as VP of Sales for the region. The San Francisco-based company has opened a new office and is recruiting for over 60 positions across San Francisco, New York, London and other locations. Doppel's platform combines threat intelligence, automated takedowns and security preparedness to defend against AI-powered impersonation and phishing attacks across email, messaging and social platforms.

PR Newswire
Jan 20th, 2026
Former Stripe engineering head joins Doppel as SVP following $70M Series C

Doppel, an AI-powered social engineering defence platform, has appointed Natasha Mohanty as senior vice president of engineering. Mohanty brings nearly two decades of experience, most recently serving as head of engineering for Optimised Checkout Suite and Link at Stripe, where she led the company's AI-powered checkout platform. The appointment follows Doppel's $70 million Series C funding round, completed six months after its Series B. The company plans to double its engineering organisation and expand annual recurring revenue whilst maintaining strong net dollar retention. Doppel is actively hiring across 60 open roles globally in San Francisco, New York, London and other locations. Mohanty will build and scale Doppel's engineering organisation to support its AI-driven multi-product platform designed to combat impersonation, phishing and social engineering attacks.

INACTIVE