Security Operations Engineer

The role

This individual-contributor role involves improving threat detection, investigating incidents, and reducing operational security risk. You will build AI-assisted security workflows and partner with Infrastructure and IT on vulnerability remediation and hardening.

What you will do

• Detect and investigate threats across cloud infrastructure, corporate systems, identity, endpoints, and production environments.
• Build and tune detections, onboard telemetry, and maintain log pipelines.
• Participate in security on-call rotation and incident response.
• Build AI-assisted security workflows to automate evidence collection and response preparation.
• Evaluate AI-assisted workflows against known cases and adversarial inputs.
• Partner with Infrastructure and IT on vulnerability remediation and hardening.
• Work with partners on operational controls for agent identities and tool access.
• Share reusable code, investigation skills, runbooks, and evaluation cases.
• Track detection coverage, alert quality, and remediation progress.

Required qualifications

• Hands-on security operations experience spanning detection engineering, threat hunting, and incident response.
• Strong scripting and software-building ability, especially Python.
• Experience with APIs, version control, tests, and operating automation in production.
• Experience with a SIEM such as Panther, Splunk, or an equivalent platform.
• Working knowledge of cloud security, identity, endpoint telemetry, networking, and Linux systems.
• Evidence of building and using AI-assisted tools in security or adjacent engineering work.
• Sound incident judgment.
• A record of making teammates more effective through tools, mentoring, code review, or documentation.
• Clear written communication.

Nice to have

• AWS, Kubernetes, bare-metal infrastructure, detection-as-code, or SOAR workflows.
• Digital forensics, threat intelligence, or testing detections through attack simulation.
• Securing AI agents and tool integrations, including prompt injection, credential misuse, and data-exfiltration risks.
• Blockchain infrastructure or other environments with sensitive keys and high-impact production systems.

Benefits

• Private Health Insurance
• Gym Reimbursement
• Commuter Benefits
• Flexible Time Off
• In-Office Group Meals
• Learning & Development Stipend
• Company Sponsored Conferences & Events
• Books & Audiobook subscription with Bookster

About the company

Alchemy is the Web3 infrastructure and developer platform that powers millions of users and the world’s most innovative blockchain applications. It provides the infrastructure and tools developers need to build reliable, scalable, and accessible experiences.