Threat Detection Analyst

Alchemy Security; United States; Remote; USD 59,000 - 72,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Employee assistance program

Flexible spending account

Health insurance

Health savings account

Life insurance

Paid time off

Parental leave

Retirement plan

Vision insurance

Job summary

Alchemy Security, a rapidly expanding information security solutions provider, seeks a seasoned SOC Analyst to drive operational excellence in services delivery and advance organizational maturation initiatives across client engagements.

You will perform security monitoring, incident analysis, threat hunting, and response using SIEM and endpoint protections, collaborate across teams, mentor colleagues, and contribute to playbooks and dashboards.

Qualifications

• Proven experience in SOC operations including incident analysis, threat hunting, incident response, and process improvement.
• Knowledge of cybersecurity threats, attack vectors, and mitigation strategies.
• Strong understanding of security tools such as SIEM, IDS, and endpoint protection.

Responsibilities

• Analyze security alerts and identify threats with timely escalation and remediation recommendations.
• Lead threat-hunting activities to identify vulnerabilities and malicious activity.
• Stay updated on emerging cyber threats and implement proactive security measures.
• Support incident response efforts including containment and incident handling.
• Collaborate to develop and optimize threat detection rules, playbooks, dashboards, and alert workflows.
• Apply offensive security insights to strengthen defensive strategies.
• Maintain documentation for processes and procedures (Confluence).
• Serve as primary contact for assigned responsibilities and ensure timely execution.

Skills

SOC operations

incident analysis

threat hunting

incident response

log management

team mentorship

documentation & reporting

Education

Advanced degree in Computer Science / IT

IT Security certification

Tools

SIEM

intrusion detection systems

endpoint protection platforms

Job description

Company Overview

Alchemy Security is a rapidly expanding Information Security solutions provider, specializing in Information Security intelligence technology and services. We combine extensive experience with innovative ideas to holistically solve our customer’s most challenging Information Security problems.

Overview Job Objective

Ensure operational excellence in services delivery while supporting team capability growth and driving forward progress on organizational maturation initiatives.

Job Responsibilities:

Security Monitoring and Incident Response:

• Perform analysis of security alerts, ensuring timely identification, escalation of potential threats, and tailored recommendations for remediation efforts to address and mitigate the impact of security incidents
• Participate in and lead threat-hunting activities to proactively identify and mitigate vulnerabilities or malicious activity.
• Stay updated on emerging cybersecurity threats and trends to implement proactive security measures.
• Support incident response efforts, including containment activities to reduce risk and serving as an incident handler and incident analyst.
• Collaborate with cross-functional teams to contribute to the development and optimization of threat detection rules, playbooks, investigation dashboards, and alert/tuning workflows.
• Leverage offensive security insights to inform and strengthen defensive strategies, ensuring a proactive approach to identifying vulnerabilities and mitigating potential threats.
• Accountable to commitments both internal (OKRs/KPIs) and external (client requests) with the ability to prioritize efficiently
• Collaborate on operational projects, such as maintain documentation for process and procedures on Confluence.
• Perform on-point duties by serving as the primary contact for assigned responsibilities, ensuring accurate execution, timely resolution, and adherence to established procedures.
• Adoption and usage of AI tools to enhance workflow efficiency while performing SOC tasks, while maintaining critical thinking and independent analysis.

Tier-2 Client Engagement:

• Serve as a point of escalation for cases, providing advanced analysis and recommendations for resolution.
• Support client communication, helping to clarify findings, recommend actions, and ensure satisfaction.
• Develop detailed threat reports to better inform clients about their threat landscape, including types of threats, motivations, and mitigation strategies.
• Enhance threat detection capabilities by contributing to log gap analysis, alert correlation tracking, and remediation activities.
• Conduct quality assurance activities, ensuring that triaging, investigations, and reporting meet high standards.
• Continuous maintenance of Client Information Repositories

Required Skills and Qualifications:

• Proven experience in SOC operations, including incident analysis, threat hunting, incident response, and process improvement.
• Knowledge of cybersecurity threats, attack vectors, and mitigation strategies.
• Strong understanding of security tools such as SIEM, intrusion detection systems, and endpoint protection platforms.
• Excellent analytical and problem-solving skills for handling complex investigations.
• Ability to mentor team members and assist in operational oversight.
• Strong documentation, reporting, and communication skills for both technical and non-technical audiences.
• Proficiency in developing and refining operational workflows, metrics tracking, and threat reporting.
• Ability to support primarily 2nd shift with off-shift coverage, as required.
• The position requires participation in two on‑site team sessions per year.
• This position is remote, however, employment for this role is limited to residents in the following states: CO, CT, MA, ME, MI, MN, MT, NV, SD, TX, WI
• Must have an unrestricted and indefinite work authorization to work in the U.S.

Education

• An advanced degree in Computer Science, Information Technology, or a related academic discipline is preferred, and 3 - 5 years relevant work experience
• A certificate in a related discipline such as IT Security, Networking, System Administration, and/or Programing/Scripting are preferred, but not required

Job Type: Full-time

Pay: From $65,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Parental leave
• Retirement plan
• Vision insurance

Application Question(s):

• Do you have an unrestricted and indefinite authorization to work in the United States?
• Do you have an advanced degree as stated in the job description?
• At this time employment for this role in limited to the following states: CO, CT, MA, ME, MI, MN, MT, NV, SD, TX, WI. Do you reside in the one of these states?
• Do you have experience in a Security Operation Center capacity as an Intrusion Analyst?

Work Location: Remote