Doppel

• Security
• Internship
• 2026

Software engineering intern, summer 2026

Doppel catches impersonation and social engineering attacks against companies: fake domains, lookalike social accounts, phishing kits. Customers include Robinhood, Coinbase and OpenAI, and the platform routes a lot of alerts every day.

I worked on two things. The first was making alert routing explainable, so a customer can see why an alert landed where it did instead of trusting a black box. That shipped to 150+ enterprise customers. The second was rebuilding the DNS tooling the detection pipeline leans on, which had been throwing away real signal; the new version recovers about 3,500 false positives a year.

• Alert routing interpretability shipped to 150+ enterprise customers
• Rebuilt DNS tooling, recovering ~3,500 false positives a year
• Worked across the detection pipeline in Python and TypeScript

Python · TypeScript · DNS