Cloud Security Operations Lead

LinuxCareers; Denver (CO); On-site; USD 147,000 - 199,000; Full time

Benefits offered by this job

Stock equity (RSUs)

Job summary

Gusto seeks a Security Operations Analyst to lead medium-sized security initiatives, respond to incidents across AWS, GCP, and corporate environments, and govern non-human identities and AI/agent security in a distributed team.

You will own security operations projects end-to-end, write Python automations, and mentor teammates while collaborating with product and IT teams. Strong cloud experience and Linux skills are essential.

Qualifications

• 5+ years in security operations or related field.
• Hands-on incident response experience including investigation and root-cause analysis.
• Working knowledge of cloud security services (AWS/GCP).
• Proficiency in Python for scripting and automation.
• Experience with enterprise security tools (SIEM/EDR/SOAR/DLP).
• Comfort with Linux environments and on-call rotation.

Responsibilities

• Own security operations projects end-to-end from design to rollout.
• Triage, investigate, and respond to security incidents across cloud and corporate environments.
• Monitor alerts from GuardDuty, Security Hub, WAF, and CSPM platforms to reduce noise.
• Write Python-based automation and SOAR playbooks to speed response times.
• Govern machine identities, API keys, and AI/agent security; expand DLP policies.
• Hunt threats using threat intel and formalize detections and playbooks.
• Collaborate with product/IT teams and participate in lightweight on-call rotation.

Skills

Security operations

Incident response

Python scripting

Cloud security

Linux

Threat hunting

Cross-team coordination

Communication

Education

Security+ or GSEC

Tools

SIEM

EDR

SOAR

DLP

Job description

Gusto seeks a Security Operations Analyst to lead medium-sized security initiatives, respond to incidents across AWS, GCP, and corporate environments, and govern non-human identities and AI/agent security in a distributed team.

You will own security operations projects end-to-end, write Python automations, and mentor teammates while collaborating with product and IT teams. Strong cloud experience and Linux skills are essential.