Doppel Product Security Engineer at Doppel supporting and scaling product and cloud security efforts. Partners with engineering teams to conduct architecture reviews and design secure solutions.
Responsibilities
At Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates.
We’re looking for a Product Security Engineer to support and scale our product and cloud security efforts by embedding security into engineering workflows and serving as a subject matter expert on all things security. The candidate will partner closely with engineering teams to conduct architecture reviews, design secure solutions to complex problems, improve and maintain our tooling (both first and third-party) and guardrails, and help design a well-rounded security program in a world where code gets written by AI and velocity is ever increasing. In addition to hands-on execution, the role emphasizes enablement providing guidance, documentation, and mentorship to engineers, along with clear communication and reporting to security leadership.
This role is open remotely across the U.S. and Canada, or hybrid from our New York, San Francisco, or Toronto office.
Partner with product and engineering teams on architecture reviews, threat modeling, and secure design, translating complex security risks into practical recommendations and clear tradeoffs.
Evaluate and roll out AI-assisted and agentic security workflows to increase security coverage and accelerate reviews, triage, and remediation, with appropriate validation and human oversight.
Improve and maintain our first- and third-party security tooling, including our in-house ASPM platform, to reduce noise, improve prioritization, and make findings easier for engineering teams to act on.
Strengthen security controls throughout the SDLC and CI/CD pipeline, including code and dependency scanning, software supply chain protections, and safeguards for AI-assisted development, without introducing unnecessary friction.
Serve as a GCP security subject matter expert, advising engineering teams on secure patterns for networking, data protection, secrets management, workload runtimes, and logging and monitoring.
Partner with infrastructure and engineering teams to implement least-privilege IAM, secure workload identities, and durable security guardrails through policy and infrastructure-as-code.
Drive vulnerability management from triage through resolution: validate findings, assess risk, establish ownership, track remediation against SLAs, and document exceptions and risk acceptance.
Coordinate penetration testing engagements, including vendor selection, scoping, testing logistics, findings validation, and remediation and retesting with engineering teams.
Help shape and scale our product security program by identifying gaps, prioritizing improvements, and communicating risk, progress, and outcomes to security leadership.
