AI-Driven Security Operations Engineer

Hood L2; New York, San Francisco (NY, CA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Private Health Insurance

Gym Reimbursement

Commuter Benefits

Flexible Time Off

In-Office Group Meals

Learning & Development Stipend

Company Sponsored Conferences & Events

Books & Audiobook subscription with 11

Job summary

Alchemy in New York is seeking a Security Operations Engineer to improve threat detection, incident investigation, and operational security risk reduction. This is a hands-on, individual-contributor role focused on building scalable security tooling and alerting.

You will triage alerts, design detections, participate in on-call incident response, and collaborate with platform and product-security teams to harden systems and automate workflows with AI-assisted insights.

Qualifications

• Hands-on security operations experience spanning detection engineering, threat hunting, and incident response.
• Strong scripting and software-building ability, especially Python; experience with APIs and automation.
• Experience with a SIEM such as Panther or Splunk, including detection logic and log analysis.
• Knowledge of cloud security, identity, endpoints, Linux; ability to investigate across system boundaries.

Responsibilities

• Detect and investigate threats across cloud, identity, endpoints, and production.
• Engineer detection coverage and maintain log pipelines.
• Respond to incidents including on-call rotation and containment.
• Build AI-assisted security workflows and evidence collection.
• Verify AI workflows against cases and require evidence.
• Reduce operational exposure with vulnerability remediation and hardening.
• Improve team effectiveness through tooling and knowledge sharing.
• Measure defensive outcomes and remediation progress.

Skills

Security operations

Python

APIs & VCS

SIEM

Cloud security

Incident response

Tools

Panther

Splunk

Job description

Alchemy in New York is seeking a Security Operations Engineer to improve threat detection, incident investigation, and operational security risk reduction. This is a hands-on, individual-contributor role focused on building scalable security tooling and alerting.

You will triage alerts, design detections, participate in on-call incident response, and collaborate with platform and product-security teams to harden systems and automate workflows with AI-assisted insights.