Security Operations Engineer

As a Security Operations Engineer at Alchemy, you'll improve how the company detects threats, investigates incidents, and reduces operational security risk. This is a hands-on individual-contributor role focused on building systems that make investigations faster and more reliable. You'll use AI-assisted engineering daily, connecting evidence, developing detections, and building response workflows while helping teammates develop independent capabilities.

What you'll do

• Detect and investigate threats by triaging alerts, hunting for suspicious activity, and investigating across cloud infrastructure, corporate systems, identity, endpoints, and production environments.
• Engineer detection coverage by building and tuning detections, onboarding useful telemetry, and maintaining reliable log pipelines.
• Respond to incidents through participation in the security on-call rotation, including scoping, containment, recovery, and post-incident improvements.
• Build AI-assisted security workflows that automate evidence collection, alert enrichment, investigation timelines, and response preparation.
• Verify AI-assisted workflows against known cases and adversarial inputs, requiring evidence for conclusions and maintaining human approval for disruptive containment actions.
• Reduce operational exposure by partnering with Infrastructure and IT on vulnerability remediation, cloud and host hardening, identity controls, and attack-surface monitoring.
• Help secure agent operations by working with platform and product-security partners on operational controls for agent identities, credentials, tool access, and audit logging.
• Improve how the team works by sharing reusable code, investigation skills, runbooks, and evaluation cases through pairing, code review, and documentation.
• Measure defensive outcomes by tracking detection coverage, alert quality, investigation effort, response time, and remediation progress.

What you bring

• Hands-on security operations experience spanning detection engineering, threat hunting, and incident response.
• Strong scripting and software-building ability, especially in Python, with experience in APIs, version control, tests, and operating automation in production.
• Experience with a SIEM such as Panther, Splunk, or an equivalent platform, including detection logic and log analysis.
• Working knowledge of cloud security, identity, endpoint telemetry, networking, and Linux systems, with the ability to investigate across system boundaries.
• Evidence of building and using AI-assisted tools in security or adjacent engineering work, demonstrating how you validate outputs, handle failures, and protect sensitive information.
• Sound incident judgment: you can separate a hypothesis from a finding, preserve evidence, and choose when to escalate or contain.
• A record of making teammates more effective through tools, mentoring, code review, or documentation without needing management authority.
• Clear written communication and the willingness to own both urgent investigations and the follow-through that prevents repeat incidents.

Nice to have

• Experience with AWS, Kubernetes, bare-metal infrastructure, detection-as-code, or SOAR workflows.
• Background in digital forensics, threat intelligence, or testing detections through attack simulation.
• Experience securing AI agents and tool integrations, including prompt injection, credential misuse, and data-exfiltration risks.
• Familiarity with blockchain infrastructure or other environments with sensitive keys and high-impact production systems.

What we offer

• Private health insurance
• Gym reimbursement
• Commuter benefits
• Flexible time off
• In-office group meals
• Learning and development stipend
• Company-sponsored conferences and events
• Books and audiobook subscription with Bookster

About Alchemy

Alchemy is a Web3 infrastructure and developer platform that powers millions of users and blockchain applications, enabling over $1 trillion in financial transactions worldwide. Trusted by JPMorgan, Stripe, Visa, Franklin Templeton, and Nike, and backed by a16z, Coatue, Silver Lake, Lightspeed, and Stanford University, Alchemy builds the foundational layer for a decentralized and AI-enabled Web3 ecosystem.