Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Gusto

Security Operations Analyst

Gusto

. Own security operations projects end to end, from problem definition through design, rollout, and measurement .

Posted 11/6/2026full-timeUnited StatesMid-LevelSenior💰 $178,000 - $199,000 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security operations and incident response, with a strong focus on automation using Python and familiarity with cloud security services. Capable of leading projects, communicating effectively with stakeholders, and mentoring team members while managing security incidents and improving detection processes.

Highest-signal resume keywords
Security Operations ManagementIncident Response ExpertisePython Scripting and AutomationCloud Security Services KnowledgeThreat Hunting and Detection

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Security OperationsIncident ResponseRoot Cause AnalysisVulnerability ManagementPython ProgrammingSecurity MonitoringThreat IntelligenceDLP Policy ManagementAI-Specific Security RisksIdentity and Access Management
Soft Skills
Analytical SkillsProblem-SolvingCommunication SkillsMentoringCollaboration
Tools & Technologies
AWS GuardDutySecurity HubGCP Security Command CenterSIEMEDRSOARDLPAI-Assisted ToolingMCP-Connected ToolsLinux Environments
Industry Keywords
SOC AnalysisCloud SecurityIncident ManagementSecurity AutomationPost-Mortem Analysis

Tech Stack

Tools & technologies
AWSCloudGoogle Cloud PlatformLinuxPython

About the role

Key responsibilities & impact
  • Own security operations projects end to end, from problem definition through design, rollout, and measurement
  • Break down ambiguous goals into deliverables, set stakeholder expectations, communicate progress and risks, and drive work to completion
  • Triage, investigate, and respond to security incidents across cloud and corporate environments
  • Serve as a core responder, document root cause and remediation, contribute to post-mortems, and own post-mortem action items
  • Monitor and triage alerts from AWS GuardDuty, Security Hub, WAF, GCP Security Command Center, and the CSPM platform
  • Tune and improve detections, reduce alert noise, and recommend configuration and process improvements
  • Write Python to extend automation frameworks and SOAR playbooks
  • Own the quality, testing, and documentation of security automation
  • Hunt for threats across multi-cloud and corporate environments using threat intelligence and team playbooks
  • Turn threat-hunting findings into new detections or playbooks
  • Govern machine identities, service accounts, and MCP/agent connections
  • Expand DLP/Nightfall policy coverage for AI and MCP-connected tools
  • Attribute and clean up unowned cloud secrets and service accounts
  • Move MCP review from reactive intake to proactive, risk-based governance
  • Use AI-assisted tooling for querying, investigating, and drafting while assessing AI-specific security risks
  • Help establish team norms for reviewing and validating AI-assisted work
  • Partner with analytics, IT, and product teams to support secure practices
  • Communicate findings to technical and non-technical stakeholders
  • Mentor newer teammates, share knowledge, and contribute to hiring interviews
  • Participate in a lightweight on-call rotation, currently about one week per month and expected to shift to approximately every 5–6 weeks as the team grows

Requirements

What you’ll need
  • 5+ years of experience in security operations, incident response, SOC analysis, or a closely related field
  • Demonstrated experience leading or serving as the primary owner of a project or initiative, including coordinating with other teams
  • Hands-on experience responding to security incidents, including investigation, root cause analysis, and post-incident follow-through
  • Working knowledge of security monitoring, incident response, and vulnerability management
  • Familiarity with core cloud security services across major providers, including AWS, GCP, or similar
  • Comfortable working in Linux environments
  • Proficiency in Python for scripting and automation
  • Hands-on experience with enterprise security tools such as SIEM, EDR, SOAR, and DLP
  • Strong analytical and problem-solving skills, with the ability to communicate findings clearly and escalate appropriately
  • Comfortable using AI-assisted tooling such as Claude Code, Claude Skills, and MCP-connected tools
  • Working understanding of AI-specific security risks, including prompt injection, data exfiltration via connected tools/MCPs, and over-permissioned agents, and how to mitigate them
  • Familiarity with identity and access concepts, including service accounts, API keys/tokens, and OAuth
  • Curiosity about AI agents and MCP-connected tools and their identity and access risks
  • Willingness and ability to participate in a lightweight, business-hours-oriented on-call rotation

Benefits

Comp & perks
  • Competitive base pay
  • Health insurance
  • 401(k)
  • Equity (RSUs)
  • Hybrid work arrangement
  • Secure, reliable, and consistent internet connection support for approved non-office locations
  • Lightweight on-call rotation with rare after-hours escalation
  • Professional development through documentation and knowledge sharing
  • Equal opportunity employment
  • Reasonable accommodations for qualified individuals with disabilities and disabled veterans