Security Operations Analyst - Cloud, AI & Automation (Equity)

Gusto; Los Angeles (CA); Hybrid; USD 130,000 - 185,000; Full time

Benefits offered by this job

Competitive base pay

Benefits

Equity (RSUs)

Job summary

Gusto is seeking a Security Operations Analyst to own end-to-end security projects, lead incident response, and improve detection across multi-cloud environments. You'll develop Python automations, tune detections, and contribute to post-mortems and governance of non-human identities.

You'll work with cross-functional teams in a distributed setup, participate in on-call rotations, mentor teammates, and help strengthen our security posture while aligning with AI-assisted tooling and risk

Qualifications

• 5+ years of experience in security operations, incident response, SOC analysis, or a closely related field.
• Demonstrated experience leading or serving as the primary owner of a project or initiative, including coordinating with other teams.
• Hands-on experience responding to security incidents, including investigation, root cause analysis, and post-incident follow-through.
• Working knowledge of security monitoring, incident response, and vulnerability management.
• Familiarity with core cloud security services across major providers (AWS, GCP, or similar) and cloud security fundamentals.
• Comfortable working in Linux environments.
• Proficiency in Python for scripting and automation.
• Hands-on experience with enterprise security tools (SIEM, EDR, SOAR, DLP). Deploying or architecting these tools from scratch is not expected at this level.
• Strong analytical and problem-solving skills, with the ability to communicate findings clearly and elevate appropriately.
• Comfortable using AI-assisted tooling (e.g., Claude Code, Claude Skills, MCP-connected tools), with a working understanding of AI-specific security risks and how to mitigate them.
• Familiarity with identity and access concepts (service accounts, API keys/tokens, OAuth) and curiosity about AI agents and MCP-connected tools introduce new risk.

Responsibilities

• Own security operations projects end to end.
• Lead and participate in incident response.
• Improve detection and monitoring.
• Build security operations automation.
• Threat hunting.
• Non-human identity and agentic AI governance (roughly one-third of your time).
• AI-assisted security operations.
• Collaborate and mentor.
• Participate in the on-call rotation.

Skills

Security ops

Incident response

Python scripting

Cloud security

Linux

Communication

Analytical thinking

Tools

SIEM

EDR

SOAR

DLP

Job description

Gusto is seeking a Security Operations Analyst to own end-to-end security projects, lead incident response, and improve detection across multi-cloud environments. You'll develop Python automations, tune detections, and contribute to post-mortems and governance of non-human identities.

You'll work with cross-functional teams in a distributed setup, participate in on-call rotations, mentor teammates, and help strengthen our security posture while aligning with AI-assisted tooling and risk