Sr Manager, Cyber Defense & Engineering

We’re looking for a visionary corporate cyber defense leader to architect and scale the security foundations that protect how Gong employees work across devices, identity, AI, SaaS, email, collaboration, and access.

You will shape the future of Corporate Security Engineering within Gong’s Cyber Defense group by building a high-performing team, operating model, and technical strategy that enables a global, distributed, AI-native workforce to move quickly and securely.

Together we will build a world-class corporate defense capability that keeps pace with Gong’s growth, strengthens trust, and turns preventative security into a strategic advantage for the business.

Security at Gong is built to be an enabler, not a blocker. We believe in giving the business, and increasingly, an AI-native workforce, the freedom to move fast, adopt new tools, and innovate, while building the guardrails that make that safe. If your instinct is "how do we make this work safely" rather than "how do we lock this down," you'll feel at home here.

• The strategy, operating model, and execution of Corporate Security Engineering within Gong’s Cyber Defense group.
• Leading the Corporate Security Engineering team and growing a high-performing organization with strong technical depth, execution rigor, and clear ownership.
• Endpoint security across a global macOS, Windows, and Linux fleet, including EDR coverage, sensor health, policy, exclusions, and hardening baselines with IT and MDM partners.
• Identity and access security, including SSO, phishing-resistant MFA, passwordless adoption, conditional access, device trust, privileged access management, joiner-mover-leaver controls, and service account hygiene.
• Email and collaboration security, including anti-phishing and BEC controls, DMARC/SPF/DKIM enforcement, malicious-content protection, and reported-phish automation with DRE.
• SaaS security posture management, including OAuth and third-party app governance, shadow SaaS discovery, and security review partnership with GRC and Procurement.
• Zero trust and corporate network security for a distributed workforce, including ZTNA, office security, segmentation, certificate trust, and Wi-Fi security.
• Data protection and insider-risk tooling across endpoint, email, browser, and SaaS channels, with focus on Gong’s crown-jewel data paths.
• Corporate vulnerability and baseline management, including patch policy, SLAs, hardening standards, and operational accountability with IT.
• Security guardrails for employee use of AI tools, with an enablement-first mindset rather than a blanket-blocking approach.
• Metrics and operating discipline across coverage, health, adoption, SLA performance, remediation speed, and security friction.

• Building strong preventive security controls without creating unnecessary friction for employees or slowing the business down.
• Designing a scalable corporate defense program for a globally distributed workforce that depends on endpoint, identity, SaaS, collaboration, and secure access systems every day.
• Governing risky OAuth access, shadow IT, and employee AI-tool adoption in ways that enable the business safely.
• Improving protection over Gong’s crown jewels, including customer conversation data, revenue data, source code, and AI/ML assets, across the egress paths that matter most.
• Building a durable partnership model across IT, DRE, Legal, People, GRC, Procurement, and NetEng so security controls are adopted, operationalized, and maintained over time.
• Creating a team structure and operating rhythm that can scale with Gong’s growth while maintaining high standards for reliability, responsiveness, and execution.
• Turning Corporate Security Engineering into a function that is measurable, automation-minded, and tightly connected to downstream detection and response workflows.

• Strengthening Gong’s security posture across endpoints, identity, SaaS, email, collaboration, access, and data protection.
• Building a preventative security program that is increasingly automated, scalable, and secure by default.
• Driving measurable improvement in corporate security KPIs such as EDR deployment coverage, phishing-resistant MFA adoption, SSO coverage, PAM coverage, patch SLAs, OAuth remediation, DLP path coverage, ZTNA adoption, and vulnerability MTTR.
• Reducing risky OAuth grants, insecure SaaS configurations, unmanaged endpoints, dormant privileged access, and operational friction across the employee environment.
• Helping Gong move faster with distributed work, SaaS adoption, and employee AI tooling because the right guardrails exist.
• Raising the leadership, engineering, and execution bar for corporate cyber defense at Gong.

• 5 + years as a people leader in corporate security, enterprise security engineering, or cyber defense.
• Comfortable operating as a hands on "player coach", staying technically credible and engaged in work, not solely directing from a distance.
• Proven track record of building and leading high-performing security engineering teams, including hiring, organizational design, mentoring, and developing technical talent.
• Deep expertise in modern corporate security, with strong experience across multiple domains including endpoint, identity and access, PAM, email, SaaS security, ZTNA, DLP, insider risk, and vulnerability management.
• Experience designing and scaling security programs for global, distributed workforces across complex endpoint, identity, SaaS, and cloud environments.
• Demonstrated ability to build secure-by-default controls, automation, and practical guardrails that reduce risk while enabling business velocity and a strong employee experience.
• Strong cross-functional leadership and influencing skills, with experience partnering across Security, IT, Engineering, GRC, Legal, People, Procurement, and other business functions.
• Metrics-driven approach to security operations, with experience defining KPIs, establishing operating rigor, and driving measurable improvements in coverage, adoption, remediation, and control effectiveness.
• Excellent executive communication and strategic thinking, with the ability to translate complex security challenges into clear priorities, decisions, and business outcomes.
• Experience operating in a high-growth technology environment and adapting security strategy, teams, and programs as the organization scales.

• We offer Gongsters a variety of medical, dental, and vision plans, designed to fit you and your family’s needs.
• Wellbeing Fund - flexible wellness stipend to support a healthy lifestyle.
• Mental Health benefits with covered therapy and coaching.
• 401(k) program to help you invest in your future.
• Education & learning stipend for personal growth and development.
• Flexible vacation time to promote a healthy work-life blend.
• Paid parental leave to support you and your family.
• Company-wide recharge days each quarter.
• Work from home stipend to help you succeed in a remote environment.

The annual salary hiring range for this position is $159,000 - $242,000 USD. 

Compensation is based on factors unique to each candidate, including, but not limited to, job-related skills, qualification, education, experience, and location. At Gong, we have a location-based compensation structure, which means there may be a different range for candidates in other locations. The total compensation package for this position, in addition to base compensation, may include incentive compensation, bonus, equity, and benefits. Some of our sales compensation programs also offer the potential to achieve above targeted earnings for those who exceed their sales targets. 

We are always looking for outstanding Gongsters! So if this sounds like something that interests you regardless of compensation, please reach out. We may have more roles for you to consider and would love to connect.

We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates' personal and financial information through fake interviews and offers. All Gong recruiting email communications will always come from the @gong.io domain. Any outreach claiming to be from Gong via other sources should be ignored.

Gong is an equal-opportunity employer. We believe that diversity is integral to our success, and do not discriminate based on race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, military status, genetic information, or any other basis protected by applicable law.

To review Gong's privacy policy, visit https://www.gong.io/gong-io-job-candidates-privacy-notice/ for more details.

#LI-SM1