How to defend the full social engineering attack chain | Register for the webinar to learn more

Threat disruption and takedowns

Joseph Natoli

Applied Cyber Takedowns Leader

Joe leads Doppel’s Applied Cyber Takedown function, overseeing global threat-disruption operations and shaping the frontier AI systems that enable Doppel to investigate, prioritize, and disrupt malicious infrastructure at scale.

Joseph Natoli, Applied Cyber Takedowns Leader

About

Joe partners closely with Product and Engineering to translate expert operational judgment into intelligent agents and automated workflows that accelerate enforcement, reduce manual intervention, and move beyond individual takedowns toward campaign-level disruption.

His work sits at the intersection of security operations, threat intelligence, automation, and frontier AI. Joe uses real-world adversary behavior, infrastructure relationships, provider responses, and enforcement outcomes to develop the ground truth, evaluation criteria, and feedback loops that teach Doppel’s AI systems how to reason through complex takedown decisions. These systems connect activity across malicious domains, social accounts, phishing infrastructure, messaging channels, and other attacker-controlled assets to uncover and disrupt broader threat networks.

Before joining Doppel, Joe spent more than a decade leading security operations teams responsible for identifying, investigating, and disrupting digital threats. His experience spans suspicious email analysis, phishing, brand impersonation, malicious infrastructure, and global takedown operations. At Doppel, he applies that expertise to building AI-driven enforcement systems that continuously learn from operational outcomes and scale expert threat-disruption decisions across the open web.

Put Applied Cyber expertise behind your defense.

Book a demo