Security Operations Engineer
Alchemy · New York
About this role
## Security Operations Engineer ### About Alchemy Alchemy is the Web3 infrastructure and developer platform powering millions of users and some of the world’s most innovative blockchain applications. Trusted by companies like JPMorgan, Stripe, Visa, Franklin Templeton, Nike, and backed by leading investors, Alchemy is building the foundational layer for a decentralized and AI-enabled Web3 ecosystem. ### The Role Alchemy is seeking a **Security Operations Engineer** to improve how the company **detects threats, investigates incidents, and reduces operational security risk**. This is a **hands-on individual-contributor** role with **no people-management responsibilities**. You’ll investigate suspicious activity and build systems that make investigations **faster, more reliable, and evidence-driven**. **AI-assisted engineering and investigation** will be part of your daily work—connecting evidence, developing detections, building response workflows, and validating results against source data. ### What You Will Do - **Detect and investigate threats**: Triage alerts, hunt for suspicious activity, and investigate across cloud infrastructure, corporate systems, identity, endpoints, and production environments. Clearly communicate uncertainty. - **Engineer detection coverage**: Build and tune detections, onboard useful telemetry, maintain reliable log pipelines, test rules against representative attacks and benign activity, and reduce noise. - **Respond to incidents**: Participate in security on-call and incident response (scoping, containment, recovery, and post-incident improvements). Preserve evidence and coordinate changes with system owners. - **Build AI-assisted security workflows**: Automate evidence collection, alert enrichment, investigation timelines, and response preparation using approved tools and data sources with traceable results. - **Verify before trusting**: Evaluate AI-assisted workflows against known cases and adversarial inputs; require evidence for conclusions and keep human approval for disruptive containment actions. - **Reduce operational exposure**: Partner with Infrastructure and IT on vulnerability remediation, cloud/host hardening, identity controls, and attack-surface monitoring. Prioritize by exposure and impact. - **Help secure agent operations**: Work with platform and product-security partners on controls for agent identities, credentials, tool access, and audit logging. Investigate misuse and build detections for suspicious agent behavior. - **Improve how the team works**: Share reusable code, investigation skills, runbooks, and evaluation cases. Pair, review automation, and teach approaches teammates can apply independently. - **Measure defensive outcomes**: Track detection coverage, alert quality, investigation effort, response time, and remediation progress. ### What We Are Looking For - Hands-on security operations experience across **detection engineering, threat hunting, and incident response**. - Strong scripting and software-building ability, especially **Python**; experience with APIs, version control, tests, and production automation. - Experience with a **SIEM** (e.g., Panther, Splunk, or equivalent), including detection logic and log analysis. - Working knowledge of **cloud security, identity, endpoint telemetry, networking, and Linux**. - Evidence of building/using **AI-assisted tools** in security or adjacent engineering work (validation, failure handling, and protection of sensitive informa
Listing freshness
CronJobs last confirmed this listing 59m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.