Security Operations Lead — Hybrid (Cloud & AI)

VulnU; Denver, New York, San Francisco (CO, NY, CA); Hybrid; USD 147,000 - 199,000; Full time

Benefits offered by this job

Equity

Job summary

Gusto is seeking a Security Operations Analyst to own security operations projects and take an active role in incident response across multi-cloud environments. You will build and tune detections, automate repeatable tasks with Python, and mentor teammates while participating in a lightweight on-call rotation.

The role emphasizes governance of non-human identities and AI-enabled tooling, with collaboration across security, IT, and product teams. Denver, hybrid work model.

Qualifications

• 5+ years of experience in security operations, incident response, SOC analysis or related field.
• Hands-on experience responding to security incidents with root-cause analysis and post-incident follow-through.
• Working knowledge of security monitoring, incident response and vulnerability management.
• Familiarity with core cloud security services (AWS, GCP) and cloud security fundamentals.
• Proficiency in Python for scripting and automation.
• Experience with enterprise security tools (SIEM, EDR, SOAR, DLP).
• Comfort with AI-assisted tooling and associated security risks.

Responsibilities

• Own security operations projects end to end from problem definition to rollout and measurement.
• Lead and participate in incident response across cloud and corporate environments.
• Improve detection and monitoring by tuning detections and reducing noise.
• Build security operations automation using Python and SOAR playbooks.
• Perform threat hunting across multi-cloud and on-premise environments.
• Govern non-human identities and MCP/agent connections; expand policy coverage for AI tools.
• Collaborate with teams and mentor newer teammates; participate in on-call rotation.

Skills

Security operations

Incident response

SOC analysis

Python scripting

Cloud security (AWS / GCP)

SIEM/EDR/SOAR/DLP tools

On-call / rotation

AI-assisted tooling awareness

Tools

Python

AWS

GCP

SIEM

EDR

SOAR

DLP

Job description

Gusto is seeking a Security Operations Analyst to own security operations projects and take an active role in incident response across multi-cloud environments. You will build and tune detections, automate repeatable tasks with Python, and mentor teammates while participating in a lightweight on-call rotation.

The role emphasizes governance of non-human identities and AI-enabled tooling, with collaboration across security, IT, and product teams. Denver, hybrid work model.