Security Operations Engineer: AI-Driven Threat Defense

Alchemy; San Francisco (CA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Private Health Insurance

Gym Reimbursement

Commuter Benefits

Flexible Time Off

In-Office Group Meals

Learning & Development Stipend

Company Sponsored Conferences & Events

Books & Audiobook subscription with B​

Job summary

Alchemy is seeking a Security Operations Engineer to strengthen threat detection, incident investigations, and reduce security risk. This is a hands-on individual-contributor role with no people-management responsibilities.

You will investigate suspicious activity, build AI-assisted workflows, and help teammates with tooling, documentation, and paired reviews to raise overall detectability and response effectiveness.

Qualifications

• Hands-on security operations spanning detection engineering, threat hunting, and incident response.
• Strong scripting and software-building ability, especially Python; experience with APIs, version control, tests, and automation in production.
• Experience with a SIEM such as Panther, Splunk, or an equivalent platform, including detection logic and log analysis.
• Working knowledge of cloud security, identity, endpoint telemetry, networking, and Linux systems. Ability to investigate across system boundaries.
• Evidence of building and using AI-assisted tools in security or adjacent engineering work. You can show how you validate outputs, handle failures, and protect sensitive information.
• Sound incident judgment: you can separate a hypothesis from a finding, preserve evidence, and choose when to escape or contain.
• A record of making teammates more effective through tools, mentoring, code review, or documentation, without needing management authority.
• Clear written communication and the willingness to own both urgent investigations and the follow-through that prevents repeat incidents.

Responsibilities

• Detect and investigate threats across cloud, identity, endpoints and production environments.
• Engineer detection coverage by building detections and telemetry pipelines.
• Respond to incidents including on-call rotation and post-incident improvements.
• Build AI-assisted security workflows and integrate data sources for traceable results.
• Verify AI-assisted workflows against cases and maintain human approval for disruptive actions.
• Reduce operational exposure with vulnerability remediation and hardening across infrastructure.
• Help secure agent operations with governance on identities and audit logging.
• Improve team workflows through reusable code, runbooks, and automation reviews.
• Measure outcomes like coverage, alert quality, and remediation progress.

Skills

Security operations

Python scripting

APIs

Version control

Automation

SIEM Panther

Splunk

Cloud security

Identity controls

Endpoint telemetry

Linux systems

Tools

Panther

Splunk

SOAR

Job description

Alchemy is seeking a Security Operations Engineer to strengthen threat detection, incident investigations, and reduce security risk. This is a hands-on individual-contributor role with no people-management responsibilities.

You will investigate suspicious activity, build AI-assisted workflows, and help teammates with tooling, documentation, and paired reviews to raise overall detectability and response effectiveness.