Cyber Defense Engineer

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io.

At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career.

We’re looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.You’ll join Corporate Security Engineering within Gong’s Cyber Defense organization, You’ll design, implement, and mature the security controls that protect Gong’s business applications, workforce, and corporate environment.

You’ll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale. Our strategy is AI-first and built on identity-centric controls, Zero Trust principles, and scalable automation.

You’ll Own

• The security posture of Gong’s corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security.
• Zero Trust access policies for workforce and external users, along with hardening for macOS, Windows, and Linux endpoints, browsers, SaaS applications, and corporate networks.
• Identity and access capabilities, including SSO, phishing-resistant MFA, passwordless authentication, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene.
• The evaluation and rollout of new security technologies, taking solutions from proof of concept through production.
• Automated workflows and API integrations that scale security controls without adding operational overhead or headcount.
• SaaS, third-party, and AI governance, including SaaS configuration reviews, vendor security assessments, access reviews, OAuth governance, posture remediation, and enablement-first guardrails for employee AI tools.
• Domain expertise for SecOps incident response and partnership with IT and R&D to embed security standards and operating procedures into day-to-day processes.

You’ll Solve

• How to protect a fast-growing SaaS company’s corporate environment across a broad and evolving technology stack.
• How to translate security risks into clear requirements, practical controls, and reliable production operations.
• How to strengthen identity, endpoint, SaaS, network, email, and collaboration security through a unified Zero Trust approach.
• How to automate security processes and integrate systems so controls remain effective as Gong scales.
• How to enable employees to use SaaS and AI tools safely through thoughtful guardrails rather than blanket restrictions.
• How to make security standards easy for partner teams to adopt by embedding them into operational workflows and SOPs.

You’ll Impact

• The security and resilience of Gong’s business applications, workforce, and corporate environment.
• Gong’s ability to scale securely through stronger identity-centric controls, Zero Trust access, endpoint hardening, and SaaS governance.
• The maturity of the corporate security program by improving posture management, remediation, automation, and operational consistency.
• The effectiveness of Cyber Defense incident response through hands-on technical expertise and strong cross-functional partnership.
• The safe adoption of emerging technologies, including AI tools, AI agents, agentic workflows, and low-code/no-code platforms.
• A security culture that helps teams move quickly and responsibly by exploring how to make things work securely.

What you bring

• 5+ years of experience in cybersecurity engineering, ideally in a high-growth SaaS environment.
• Hands-on expertise with identity platforms, including Okta or Entra ID, plus experience in at least two of the following areas: data security, DLP/DSPM, endpoint security, EDR/BDR, email security, or network/SASE.
• Practical experience with SSO, MFA, RBAC, SCIM, Zero Trust, and SSPM platforms.
• Experience evaluating SaaS and application security, with an understanding of common security frameworks such as CIS, NIST, and OWASP.
• An engineering mindset: you build automation, API integrations, and workflows rather than focusing only on tool administration.
• The ability to drive security through strong relationships, communicate effectively across teams, and take ownership of complex problems.
• An AI-first, hands-on problem-solving mindset.
• Fluent English and the ability to work effectively with global teams.

Strong advantages

• Experience securing AI agents, agentic workflows, or low-code/no-code platforms.
• Offensive security knowledge.
• Familiarity with emerging SaaS threats, including OAuth abuse, token theft, and identity-based attacks.

Scope clarity

Corporate Security Engineering owns endpoint security, identity security, email and collaboration security, SaaS posture, Zero Trust access, DLP and insider-risk tooling, corporate vulnerability management, and employee AI-tool security.

This role is part of Cyber Defense and focuses on the corporate environment. It is not the primary owner for CI/CD security, software supply-chain controls, infrastructure-as-code guardrails, product application security, product penetration testing, or cloud infrastructure provisioning and reliability.

Why Gong

At Gong, we trust and empower our employees to take ownership, solve complex problems, make sound decisions, and create meaningful impact. Our security team brings together diverse backgrounds, experience, and perspectives, and approaches security with a “let’s explore how we can make it work” mindset.We encourage employees to express their personality and identity, and we are committed to fairness and equal opportunity. Our hybrid working model supports flexibility, autonomy, strong working relationships, and effective work habits.