Senior Cyber Defense Engineer

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career. We’re looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.You’ll join Corporate Security Engineering within Gong’s Cyber Defense organization, You’ll design, implement, and mature the security controls that protect Gong’s business applications, workforce, and corporate environment. You’ll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale. Our strategy is AI-first and built on identity-centric controls, Zero Trust principles, and scalable automation. You’ll Own The security posture of Gong’s corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security. Zero Trust access policies for workforce and external users, along with hardening for macOS, Windows, and Linux endpoints, browsers, SaaS applications, and corporate networks. Identity and access capabilities, including SSO, phishing-resistant MFA, passwordless authentication, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene. The evaluation and rollout of new security technologies, taking solutions from proof of concept through production. Automated workflows and API integrations that scale security controls without adding operational overhead or headcount. SaaS, third-party, and AI governance, including SaaS configuration reviews, vendor security assessments, access reviews, OAuth governance, posture remediation, and enablement-first guardrails for employee AI tools. Domain expertise for SecOps incident response and partnership with IT and R&D to embed security standards and operating procedures into day-to-day processes. You’ll Solve How to protect a fast-growing SaaS company’s corporate environment across a broad and evolving technology stack. How to translate security risks into clear requirements, practical controls, and reliable production operations. How to strengthen identity, endpoint, SaaS, network, email, and collaboration security through a unified Zero Trust approach. How to automate security processes and integrate systems so controls remain effective as Gong scales. How to enable employees to use SaaS and AI tools safely through thoughtful guardrails rather than blanket restrictions. How to make security standards easy for partner teams to adopt by embedding them into operational workflows and SOPs. You’ll Impact The security and resilience of Gong’s business applications, workforce, and corporate environment. Gong’s ability to scale securely through stronger identity-centric controls, Zero Trust access, endpoint hardening, and SaaS governance. The maturity of the corporate security program by improving posture management, remediation, automation, and operational consistency. The effectiveness of Cyber Defense incident response through hands-on technical expertise and strong cross-functional partnership. The safe adoption of emerging technologies, including AI tools, AI agents, agentic workflows, and low-code/no-code platforms. A security culture that helps teams move quickly and responsibly by exploring how to make things work securely.