Security Operations Analyst

Summary

Join Gusto's Security Operations team as a Security Analyst and contribute to protecting our company and customers from various threats. You will focus on vulnerability management and security operations, working across Eastern and Pacific time zones. This role requires 2+ years of experience in security operations and involves monitoring, incident response, vulnerability analysis, and collaboration with cross-functional teams. You will utilize scripting languages and security tools to enhance efficiency and effectiveness. The position offers a chance to grow your expertise in a dynamic setting and includes a competitive salary range.

Requirements

• 2+ years of experience in security operations or a related field
• Monitoring security tools for alerts and investigating suspicious activity
• Conducting regular vulnerability assessments, triaging risks, and tracking remediation efforts
• Identifying, analyzing, and responding to security incidents, which includes root cause analysis and remediation
• Gathering and applying threat intelligence to proactively address potential security threats
• Documenting procedures and creating incident reports to improve response processes and compliance
• Basic understanding of networking, firewalls, and security protocols
• Operational familiarity with Linux and containers
• Understanding of K8s manifest files and package versioning
• A passion for continuous learning and a proactive approach to security challenges
• Exposure to cloud environments (AWS, Azure, or Google Cloud)
• Knowledge of managing IAM permissions with Terraform
• Understanding of the principles of least privilege
• Scripting language proficiency
• Familiarity with security tools such as SIEM, endpoint protection, and vulnerability scanners
• Analyze and document findings effectively, providing clear insights into key issues

Responsibilities

• Perform real-time monitoring
• Respond to security incidents
• Assist with post-incident analysis
• Administer, tune, and enhance security tools such as SIEM, endpoint detection & response, data loss prevention, etc
• Develop and maintain automation scripts and tools to enhance security operations efficiency and effectiveness
• Maintain documentation on security incidents, vulnerabilities, and procedures to support continuous improvement and compliance
• Support internal users with security concerns and questions, helping to strengthen and promote Gusto’s security culture
• Triage and analyze vulnerability results to identify and prioritize security weaknesses, escalating as necessary for immediate response
• Collaborate with cross-functional teams to drive the remediation of vulnerabilities
• Regularly audit and refine vulnerability management processes, tools, and reports to maintain accuracy, and ensure compliance with security policies

Preferred Qualifications

• Experience with log analysis and digital forensics
• Experience leading an incident response investigation
• Understand vulnerabilities and how to patch them
• Experience with GitHub Dependabot
• Understanding of industry standard security frameworks and benchmarking
• Coding experience in one or more general purpose programming languages
• Security certifications (e.g., CISSP, CompTIA Security+, AWS Certified Cloud Practitioner) are a plus
• Interest in the landscape of security and its impact across multiple industries and tactics, techniques, procedures of threat actors

Benefits

• Our cash compensation amount for this role is targeted at $112,000-125,000 in Denver & most remote locations, and $140,000-157,000 for San Francisco & New York
• Gusto has physical office spaces in Denver, San Francisco, and New York City. Employees who are based in those locations will be expected to work from the office on designated days approximately 2-3 days per week (or more depending on role)
• When approved to work from a location other than a Gusto office, a secure, reliable, and consistent internet connection is required