AI-Driven Threat Detection Engineer

Alchemy; New York, San Francisco (NY, CA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Private Health Insurance

Gym Reimbursement

Commuter Benefits

Flexible Time Off

In-Office Group Meals

Learning & Development Stipend

Company Sponsored Conferences & Events

Books & Audiobook subscription with 책/

Job summary

Alchemy is seeking a Security Operations Engineer to enhance threat detection, incident response, and security risk reduction across cloud, endpoints, and production systems. The role emphasizes hands-on work, building automated detections, and AI-assisted workflows.

You will collaborate with platform teams, maintain reliable log pipelines, and uphold rigorous evidence handling principles. The ideal candidate has strong Python skills, experience with Panther or Splunk, cloud security knowledge,

Qualifications

• Hands-on security operations spanning detection engineering, threat hunting, and incident response.
• Proficient in Python; API usage, version control, and production automation.
• Experience with a SIEM such as Panther or Splunk including detection logic and log analysis.
• Knowledge of cloud security, identity, endpoints, networking, and Linux; cross-system investigations.
• Evidence of building and using AI-assisted security tools and validations.

Responsibilities

• Detect and investigate threats across cloud, identity, endpoints, and production environments.
• Engineer detection coverage by building telemetry, tuning rules, and addressing gaps.
• Participate in security on-call rotations and incident response, including containment and recovery.
• Build AI-assisted security workflows and integrate with approved tools and data sources.
• Verify AI-assisted workflows against known cases; preserve evidence and maintain human oversight for disruptive actions.
• Reduce operational exposure by collaborating on vulnerability remediation and hardening.
• Support agent operations with secure identities, access controls, and audit logging.

Skills

Threat hunting

Incident response

Python scripting

Cloud security

AI-assisted tools

Mentoring

Written communication

Tools

Panther SIEM

Splunk

Job description

Alchemy is seeking a Security Operations Engineer to enhance threat detection, incident response, and security risk reduction across cloud, endpoints, and production systems. The role emphasizes hands-on work, building automated detections, and AI-assisted workflows.

You will collaborate with platform teams, maintain reliable log pipelines, and uphold rigorous evidence handling principles. The ideal candidate has strong Python skills, experience with Panther or Splunk, cloud security knowledge,