Security Operations Analyst — Cloud, AI & Incident Response

Gusto; New York (NY); Hybrid; USD 178,000 - 199,000; Full time

Benefits offered by this job

Equity (RSUs)

Job summary

Gusto is seeking a Security Operations Analyst with 5+ years of experience to own security projects end to end, lead incident response, and improve detection across multi-cloud environments. You’ll build Python-based automation, govern non-human identities, and mentor teammates while engaging in AI-assisted tooling to strengthen defenses.

You’ll work across AWS and GCP in a hybrid office setting with Denver, San Francisco, and New York teams, contributing to a strong security culture and

Qualifications

• 5+ years of experience in security operations, incident response, SOC analysis, or a closely related field.
• Hands-on experience leading or owning a project or initiative, coordinating with other teams.
• Experience responding to security incidents with root cause analysis and post-incident follow-through.
• Familiarity with cloud security services across AWS, GCP, or similar and cloud security fundamentals.
• Proficiency in Python for scripting and automation; comfortable in Linux environments.
• Experience with enterprise security tools (SIEM, EDR, SOAR, DLP).

Responsibilities

• Own security operations projects end to end, delivering from problem to rollout and measurement.
• Lead and participate in incident response, triage, investigations, and post-mortems.
• Improve detection and monitoring across AWS, GCP, and CSPM platforms; tune detections and reduce noise.
• Build security operations automation with Python to extend automation frameworks and SOAR playbooks.
• Threat hunting across multi-cloud and corporate environments using threat intel and playbooks.
• Govern non-human identities and AI governance, expanding policy coverage for AI and MCP-connected tools.
• Use AI-assisted tooling to speed up querying, investigating, and drafting while assessing AI risks.
• Collaborate with analytics, IT, and product teams; mentor teammates and contribute to hiring by interviewing candidates.
• Participate in a lightweight on-call rotation; handle after-hours escalations as needed.

Skills

Security operations

Incident response

SOC analysis

Python scripting

Linux

Cloud security

AI tooling

Mentoring

On-call rotation

Tools

SIEM

EDR

SOAR

DLP

Job description

Gusto is seeking a Security Operations Analyst with 5+ years of experience to own security projects end to end, lead incident response, and improve detection across multi-cloud environments. You’ll build Python-based automation, govern non-human identities, and mentor teammates while engaging in AI-assisted tooling to strengthen defenses.

You’ll work across AWS and GCP in a hybrid office setting with Denver, San Francisco, and New York teams, contributing to a strong security culture and