Security Operations Engineer - AI-Driven Threat Detection

SOLANA FOUNDATION; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Private Health Insurance

Gym Reimbursement

Commuter Benefits

Flexible Time Off

In-Office Group Meals

Learning & Development Stipend

Company Sponsored Conferences & Events

Books & Audiobook subscription with a9

Job summary

Alchemy is seeking a Security Operations Engineer to improve threat detection, incident investigation, and risk reduction across cloud, identity, endpoints, and production environments. You will build AI-assisted workflows, tune detections, and participate in on-call incident response to drive faster, evidence-based conclusions.

Ideal candidates have hands-on security operations experience, strong Python scripting, and familiarity with SIEMs like Panther or Splunk, plus cloud security and Linux

Qualifications

• Hands-on security operations spanning detection engineering, threat hunting, and incident response.
• Strong scripting and software-building ability, especially Python; APIs, version control, tests, and automation.
• Experience with a SIEM such as Panther or Splunk, including detection logic and log analysis.
• Working knowledge of cloud security, identity, endpoint telemetry, networking, and Linux systems.
• Evidence of building and using AI-assisted tools in security or adjacent engineering work.
• Sound incident judgment: separate hypotheses from findings and preserve evidence.
• Mentoring, code review, and documentation to improve teammates' effectiveness.
• Clear written communication and ownership of urgent investigations and follow-through.

Responsibilities

• Detect and investigate threats across cloud, identity, endpoints, and production environments.
• Engineer detection coverage, onboard telemetry, and maintain log pipelines.
• Respond to incidents with on-call participation and post-incident improvements.
• Build AI-assisted security workflows and ensure traceable results.
• Verify AI workflows against known cases, with human approval for disruptive actions.
• Reduce operational exposure through remediation and hardening efforts.
• Improve team effectiveness via shared tooling, runbooks, and knowledge sharing.
• Measure outcomes like coverage, alert quality, and remediation progress.

Skills

Security operations

Detection engineering

Threat hunting

Incident response

Python

APIs

Version control

Tests

Automation

SIEM Panther

SIEM Splunk

Cloud security

Identity

Endpoint telemetry

Networking

Linux

AI tools

Incident judgment

Mentoring

Code review

Documentation

Communication

Tools

AWS

Kubernetes

Bare-metal infrastructure

Detection-as-code

SOAR workflows

Job description

Alchemy is seeking a Security Operations Engineer to improve threat detection, incident investigation, and risk reduction across cloud, identity, endpoints, and production environments. You will build AI-assisted workflows, tune detections, and participate in on-call incident response to drive faster, evidence-based conclusions.

Ideal candidates have hands-on security operations experience, strong Python scripting, and familiarity with SIEMs like Panther or Splunk, plus cloud security and Linux