The opportunity
At Gusto, we're on a mission to grow the small business economy. We handle the hard stuff — payroll, health insurance, 401(k)s, and HR — so owners can focus on their craft and their customers.
What you'll do
+ years of experience in security operations, incident response, SOC analysis, or a closely related field.
Demonstrated experience leading or serving as the primary owner of a project: or initiative, including coordinating with other teams.
Hands-on experience responding to security incidents, including: investigation, root cause analysis, and post-incident follow-through.
Working knowledge of security monitoring, incident response, and vulnerability management.
Familiarity with core cloud security services across major providers (AWS,: GCP, or similar) and cloud security fundamentals.
Comfortable working in Linux environments.
What they're looking for
- Proficiency in Python for scripting and automation.
- Hands-on experience with enterprise security tools (SIEM, EDR, SOAR, DLP).: Deploying or architecting these tools from scratch is not expected at this level.
- Strong analytical and problem-solving skills, with the ability to communicate: findings clearly and escalate appropriately.
- Comfortable using AI-assisted tooling (e.g., Claude Code, Claude Skills,: MCP-connected tools), with a working understanding of AI-specific security risks (prompt injection, data exfiltration via connected tools/MCPs, over-permissioned agents) and how to mitigate them.
