About the role
Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career. We’re looking for a visionary corporate cyber defense leader to architect and scale the security foundations that protect how Gong employees work across devices, identity, AI, SaaS, email, collaboration, and access. You will shape the future of Corporate Security Engineering within Gong’s Cyber Defense group by building a high-performing team, operating model, and technical strategy that enables a global, distributed, AI-native workforce to move quickly and securely. Together we will build a world-class corporate defense capability that keeps pace with Gong’s growth, strengthens trust, and turns preventative security into a strategic advantage for the business. OUR PHILOSOPHY Security at Gong is built to be an enabler, not a blocker. We believe in giving the business, and increasingly, an AI-native workforce, the freedom to move fast, adopt new tools, and innovate, while building the guardrails that make that safe. If your instinct is "how do we make this work safely" rather than "how do we lock this down," you'll feel at home here. YOU'LL OWN The strategy, operating model, and execution of Corporate Security Engineering within Gong’s Cyber Defense group. Leading the Corporate Security Engineering team and growing a high-performing organization with strong technical depth, execution rigor, and clear ownership. Endpoint security across a global macOS, Windows, and Linux fleet, including EDR coverage, sensor health, policy, exclusions, and hardening baselines with IT and MDM partners. Identity and access security, including SSO, phishing-resistant MFA, passwordless adoption, conditional access, device trust, privileged access management, joiner-mover-leaver controls, and service account hygiene. Email and collaboration security, including anti-phishing and BEC controls, DMARC/SPF/DKIM enforcement, malicious-content protection, and reported-phish automation with DRE. SaaS security posture management, including OAuth and third-party app governance, shadow SaaS discovery, and security review partnership with GRC and Procurement. Zero trust and corporate network security for a distributed workforce, including ZTNA, office security, segmentation, certificate trust, and Wi-Fi security. Data protection and insider-risk tooling across endpoint, email, browser, and SaaS channels, with focus on Gong’s crown-jewel data paths. Corporate vulnerability and baseline management, including patch policy, SLAs, hardening standards, and operational accountability with IT. Security guardrails for employee use of AI tools, with an enablement-first mindset rather than a blanket-blocking approach. Metrics and operating discipline across coverage, health, adoption, SLA performance, remediation speed, and security friction. YOU'LL SOLVE Building strong preventive security controls without creating unnecessary friction for employees or slowing the business down. Designing a scalable corporate defense program for a globally distributed workforce that depends on endpoint, identity, SaaS, collaboration, and secure access systems every day. Governing risky OAuth access, shadow IT, and employee AI-tool adoption in ways that enable the business safely. Improving protection over Gong’s crown jewels, including customer conversation data, revenue data, source code, and AI/ML assets, across the egress paths that matter most. Building a durable partnership model across IT, DRE, Legal, People, GRC, Procurement, and NetEng so security controls are adopted, operationalized, and maintained over time. Creating a team structure and operating rhythm that can scale with Gong’s growth while maintaining high standards for reliability, responsiveness, and execution. Turning Corporate Security Engineering into a function that is measurable, automation-minded, and tightly connected to downstream detection and response workflows. YOU'LL IMPACT Strengthening Gong’s security posture across endpoints, identity, SaaS, email, collaboration, access, and data protection. Building a preventative security program that is increasingly automated, scalable, and secure by default. Driving measurable improvement in corporate security KPIs such as EDR deployment coverage, phishing-resistant MFA adoption, SSO coverage, PAM coverage, patch SLAs, OAuth remediation, DLP path coverage, ZTNA adoption, and vulnerability MTTR. Reducing risky OAuth grants, insecure SaaS configurations, unmanaged endpoints, dormant privileged access, and operational friction across the employee environment. Helping Gong move faster with distributed work, SaaS adoption, and employee AI tooling because the right guardrails exist. Raising the leadership, engineering, and execution bar for corporate cyber defense at Gong. YOU ARE A technical security leader who enjoys building teams, systems, and operating models in equal measure. Experienced in people leadership or team leadership, and deeply credible in modern corporate security engineering or enterprise security engineering domains. Strong across several of the following areas: endpoint security, identity security, PAM, email security, collaboration security, SSPM, ZTNA, DLP, insider risk, and corporate vulnerability management. Passionate about building secure-by-default controls, automation, and practical guardrails that help the business move faster. Comfortable influencing cross-functional stakeholders without relying on formal authority alone. Skilled at hiring, mentoring, calibrating performance, and developing strong talent while maintaining a high bar. Pragmatic, metrics-oriented, and able to balance security rigor with usability and operational reality. Excited to define what great corporate cyber defense leadership looks like at an AI-native company.
