Security Operations Engineer - AI-Driven Threat Detection

Alchemy; New York (NY); On-site; USD 160,000 - 180,000; Full time

Benefits offered by this job

Private Health Insurance

Gym Reimbursement

Commuter Benefits

Flexible Time Off

In-Office Group Meals

Learning & Development Stipend

Job summary

Alchemy is seeking a Security Operations Engineer in New York to strengthen threat detection, incident response, and security tooling across cloud, endpoints, and production systems.

The role emphasizes hands-on work, AI-assisted workflows, and collaboration with platform and security teams to improve detection coverage and reduce risk. A strong background in Python and SIEMs is expected, with a focus on practical, evidence-based judgment.

Qualifications

• Hands-on security operations experience spanning detection engineering, threat hunting, and incident response.
• Strong Python scripting and automation skills with production experience.
• Experience with SIEM platforms like Panther or Splunk, including detection logic and log analysis.
• Working knowledge of cloud security, identity, endpoints, networking, and Linux systems.

Responsibilities

• Detect and investigate threats across cloud infrastructure, identity, endpoints, and production environments.
• Engineer detection coverage and maintain reliable log pipelines; test rules against real-world scenarios.
• Respond to incidents as part of on-call rotation with containment, recovery, and post-incident improvements.
• Build AI-assisted security workflows and integrate with approved tools and data sources.

Skills

Security operations

Threat hunting

Incident response

Python scripting

SIEM

Cloud security

AI-assisted tooling

Documentation

Code review

Tools

Panther SIEM

Splunk

Git

Cloud APIs

Job description

Alchemy is seeking a Security Operations Engineer in New York to strengthen threat detection, incident response, and security tooling across cloud, endpoints, and production systems.

The role emphasizes hands-on work, AI-assisted workflows, and collaboration with platform and security teams to improve detection coverage and reduce risk. A strong background in Python and SIEMs is expected, with a focus on practical, evidence-based judgment.