Security Engineer, Gusto

• Security Engineers experienced in one or more of the following: data loss prevention, VPNs, Zero-Trust concepts, VDIs, macOS and Windows endpoint security monitoring and hardening, vulnerability management, infrastructure hardening, identity and access management, cloud security, security analysis and response, detection engineering
• Collaborative Security Engineers experienced working cross-functionally with stakeholders to manage projects, and incidents, to create positive change for the organization
• Experienced candidates who have participated and led incident management processes, including security incident response
• Demonstrated knowledge of both on-premise and cloud-based corporate security technologies such as endpoint detection and response technologies, vulnerability management scanners, cloud identity providers
• Experienced working with development workflows in source control, infrastructure as code, and CI/CD pipelines
• Strong proficiency in one or more programming/scripting languages, with the ability to mentor others on best practices in at least one language: Python, Golang, Ruby

• Creating and executing on strategic roadmaps for corporate security that’s prioritized based on business needs, risk and shifting priorities - e.g. Enterprise wide DLP program that covers endpoints, SaaS, and Cloud resources; VDI Infrastructure best practices; Windows Monitoring and Hardening, etc…
• Design and implement security controls to protect our data, business technologies, infrastructure, networks, and applications against threat actors
• Collaborate with the IT Engineering and Business Technology Tech teams to ensure secure design and operation of our corporate services
• Conduct security assessments and provide recommendations for improvements to our security posture
• Develop and maintain security policies, standards, and procedures
• Build signals and detections using Python, SQL and detection as code methods to detect and respond to security events
• Work alongside threat defense operations to investigate and perform security response for security events/incidents
• Perform hypothesis driven threat hunting based on a detection lifecycle
• Participate in an on-call rotation

• Comprehensive medical, dental, and vision benefits, plus a variety of mental health resources
• Flexible vacation - Gusties are encouraged to take the time off they need to continue doing great work
• Fertility treatments, parental leave, pregnancy termination, caregiving, gender-affirming surgery, hormone treatments, transgender-inclusive services, and more
• If you work at one of our homebases, enjoy food, drinks, and good conversation — on us
• Celebrate 5 or 10 years at Gusto and take a month off to recharge
• Take advantage of internet, phone, commuter, and wellness stipends each month, along with a WFH stipend and cash for anniversaries

Total funding: $706.1m

For many small businesses, vital administrative tasks such as payroll, taxes, and benefits are manual tasks that take time and energy which many SMB owners don’t have. The three co-founders of Gusto – all coming from small business backgrounds – collaborated on a Fintech company that would handle employee payments, benefits administration, and compliance support specifically for small businesses.