Senior Corporate Security Engineer

About the role

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and want people who are excited to build what comes next.

We’re looking for a Senior Corporate Security Engineer to help secure the systems, identities, devices, and collaboration platforms that power how Gong employees work every day. This is a hands-on senior engineering role within Corporate Security Engineering, part of Gong’s Cyber Defense organization. You’ll help design, implement, and scale security controls across endpoint, identity, SaaS, email, collaboration, zero-trust access, and data protection for a global, distributed workforce. This role is a strong fit for someone who combines deep technical judgment with a builder mindset, strong cross-functional partnership, and a pragmatic approach to reducing risk without slowing the business down.

Responsibilities

• Own key parts of Gong’s corporate security engineering roadmap across endpoint, identity, SaaS, email, collaboration, access, and data protection.
• Endpoint security engineering across a global macOS, Windows, and Linux fleet, including EDR coverage, health, hardening baselines, and containment readiness in close partnership with IT and DRE.
• Identity and access security initiatives, including SSO, phishing-resistant MFA, passwordless adoption, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene.
• Email and collaboration security controls across email, Slack, Drive, and related business platforms.
• SaaS security posture management, shadow SaaS discovery, and third-party or OAuth governance.
• Zero-trust and corporate network security initiatives for a globally distributed workforce.
• Data protection and insider-risk capabilities across endpoint, email, browser, and SaaS channels.
• Corporate vulnerability and baseline management programs in partnership with IT.
• Security guardrails for employee use of AI tools, with an enablement-first mindset.
• Automation, integrations, and reusable engineering patterns that make the security program more scalable and effective.

Key Challenges

• Build strong preventive controls without creating unnecessary friction for employees.
• Design scalable protections for endpoints, identity, SaaS, and collaboration systems used across a global workforce.
• Govern OAuth access, shadow IT, and employee AI-tool adoption in ways that enable the business safely.
• Improve data protection across the paths most relevant to Gong’s most sensitive assets, including customer conversation data, revenue data, source code, and AI or ML assets.
• Reduce manual work by engineering durable automation, workflows, and operational guardrails.
• Partner closely with IT, DRE, People, Legal, GRC, Procurement, and engineering teams to implement controls that stick.
• Raise the consistency, reliability, and maintainability of the corporate security environment over time.

Impact

• Strengthen Gong’s security posture across endpoints, identity, SaaS, email, collaboration, and access.
• Help Gong move faster with AI tooling, distributed work, and SaaS adoption because the right guardrails exist.
• Create engineering leverage through reusable frameworks, integrations, and standards that make the whole function stronger.
• Help define what great corporate security engineering looks like inside an AI-native company.

Requirements

• 5+ years of experience in any of the following areas: Security Data Pipeline Engineering, Detection Engineering, SIEM Engineering, Cyber Intelligence and Threat Hunting, or Security Platform Engineering.
• Proficiency with EDR/XDR (CrowdStrike, SentinelOne, MS Defender), Cloud Security Posture Management (Wiz, Prisma Cloud, Orca), and WAFs (Cloudflare, Akamai).
• Proficiency in deploying and maintaining Zero Trust security platforms and controls.
• Experience building data ingestion pipelines using CI/CD methodologies.
• Proven experience building, testing, and tuning custom detection logic and familiarity with Query Languages (KQL, SQL, SPL) for automation needs.
• Familiarity with attack frameworks (MITRE ATT&CK) and mitigation strategies.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.
• A senior technical security builder who enjoys planning, designing, and implementing security programs at scale.
• Experienced in corporate security engineering, enterprise security engineering, or similarly hands-on defensive roles in modern SaaS or cloud environments.
• Strong in several of the following areas: endpoint security, identity security, PAM, email security, collaboration security, SSPM, ZTNA, DLP, insider risk, and corporate vulnerability management.
• Proven in designing and implementing programs, not just administering tools.
• An engineer at heart, with experience building automation, APIs, workflows, integrations, and scalable operational practices.
• Comfortable partnering closely with IT and other business stakeholders to ship secure solutions that employees will actually adopt.
• Pragmatic, collaborative, and able to balance strong controls with usability, speed, and enablement.
• A mentor who raises technical standards, establishes durable engineering norms, and helps others grow.
• Excited to help shape how a modern corporate security program should work in an AI-native company.

Preferred Qualifications

• Experience securing AI tool usage in the enterprise, including data-flow restrictions, sanctioned-tool models, OAuth governance, and telemetry hooks for downstream detection.
• Experience in a high-growth, global SaaS company with a distributed workforce.
• Strong knowledge of identity-first security architectures and zero-trust access models.
• Experience building KPI-driven programs around coverage, adoption, SLA performance, and control effectiveness.
• Familiarity with adjacent detection and response workflows so preventive controls and response actions reinforce each other.

Scope

This role is part of Cyber Defense and is focused on the corporate environment. Corporate Security Engineering owns endpoint security, identity security, email and collaboration security, SaaS posture, zero trust access, DLP and insider-risk tooling, corporate vulnerability management, and employee AI-tool security.

This role is not the primary owner for CI/CD security, supply-chain controls, infrastructure-as-code guardrails, product application security, product pentesting, or cloud infrastructure provisioning and reliability.

Why Gong Security

At Gong, security is expected to enable the business, not just protect it. We look for people who can solve hard problems, partner effectively across the company, and build durable solutions that help the organization move faster and safer. You’ll join a team that values ownership, strong technical craft, practical problem solving, and visible impact. If you want to help define modern corporate security in an AI-native company, this is a chance to do meaningful work at real scale.

Benefits

• Variety of medical, dental, and vision plans, designed to fit you and your family’s needs.
• Wellbeing Fund - flexible wellness stipend to support a healthy lifestyle.
• Mental Health benefits with covered therapy and coaching.
• 401(k) program to help you invest in your future.
• Education & learning stipend for personal growth and development.
• Flexible vacation time to promote a healthy work-life blend.
• Paid parental leave to support you and your family.
• Company-wide recharge days each quarter.
• Work from home stipend to help you succeed in a remote environment.

Pay

The annual salary hiring range for this position is $134,000 - $205,000 USD. Compensation is based on factors unique to each candidate, including, but not limited to, job-related skills, qualification, education, experience, and location. At Gong, we have a location-based compensation structure, which means there may be a different range for candidates in other locations. The total compensation package for this position, in addition to base compensation, may include incentive compensation, bonus, equity, and benefits.