Senior Corporate Security Engineer

Gong.io•Salt Lake City, UT

4h•$134,000 - $205,000

About The Position

Gong is seeking a Senior Corporate Security Engineer to join their Cyber Defense organization. This is a hands-on engineering role focused on designing, implementing, and scaling security controls across various platforms including endpoint, identity, SaaS, email, collaboration, zero-trust access, and data protection for a global, distributed workforce. The ideal candidate will have strong technical judgment, a builder mindset, excellent cross-functional partnership skills, and a pragmatic approach to risk reduction without hindering business operations. The role involves owning key aspects of the corporate security engineering roadmap, including endpoint security for macOS, Windows, and Linux fleets, identity and access management initiatives (SSO, MFA, passwordless, conditional access), email and collaboration security, SaaS security posture management, zero-trust network security, data protection, corporate vulnerability management, and security guardrails for AI tool usage. The position aims to solve challenges related to building effective preventive controls, designing scalable protections, governing access and tool adoption, improving data protection for sensitive assets, reducing manual work through automation, and partnering with various teams to implement robust security solutions.

Requirements

5+ years of experience in Security Data Pipeline Engineering, Detection Engineering, SIEM Engineering, Cyber Intelligence and Threat Hunting, or Security Platform Engineering.
Proficiency with EDR/XDR (CrowdStrike, SentinelOne, MS Defender), Cloud Security Posture Management (Wiz, Prisma Cloud, Orca), and WAFs (Cloudflare, Akamai).
Proficiency in deploying and maintaining Zero Trust security platforms and controls.
Experience building data ingestion pipelines using CI/CD methodologies.
Proven experience building, testing, and tuning custom detection logic and familiarity with Query Languages (KQL, SQL, SPL) for automation needs.
Familiarity with attack frameworks (MITRE ATT&CK) and mitigation strategies.
Strong analytical and problem-solving skills.
Excellent communication and teamwork abilities.
A senior technical security builder who enjoys planning, designing, and implementing security programs at scale.
Experienced in corporate security engineering, enterprise security engineering, or similarly hands-on defensive roles in modern SaaS or cloud environments.
Strong in several of the following areas: endpoint security, identity security, PAM, email security, collaboration security, SSPM, ZTNA, DLP, insider risk, and corporate vulnerability management.
Proven in designing and implementing programs, not just administering tools.
An engineer at heart, with experience building automation, APIs, workflows, integrations, and scalable operational practices.
Comfortable partnering closely with IT and other business stakeholders to ship secure solutions that employees will actually adopt.
Pragmatic, collaborative, and able to balance strong controls with usability, speed, and enablement.
A mentor who raises technical standards, establishes durable engineering norms, and helps others grow.
Excited to help shape how a modern corporate security program should work in an AI-native company.

Nice To Haves

Experience securing AI tool usage in the enterprise, including data-flow restrictions, sanctioned-tool models, OAuth governance, and telemetry hooks for downstream detection.
Experience in a high-growth, global SaaS company with a distributed workforce.
Strong knowledge of identity-first security architectures and zero-trust access models.
Experience building KPI-driven programs around coverage, adoption, SLA performance, and control effectiveness.
Familiarity with adjacent detection and response workflows so preventive controls and response actions reinforce each other.

Responsibilities

Own key parts of Gong’s corporate security engineering roadmap across endpoint, identity, SaaS, email, collaboration, access, and data protection.
Manage endpoint security engineering across a global macOS, Windows, and Linux fleet, including EDR coverage, health, hardening baselines, and containment readiness in close partnership with IT and DRE.
Lead identity and access security initiatives, including SSO, phishing-resistant MFA, passwordless adoption, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene.
Implement email and collaboration security controls across email, Slack, Drive, and related business platforms.
Oversee SaaS security posture management, shadow SaaS discovery, and third-party or OAuth governance.
Drive zero-trust and corporate network security initiatives for a globally distributed workforce.
Develop data protection and insider-risk capabilities across endpoint, email, browser, and SaaS channels.
Manage corporate vulnerability and baseline management programs in partnership with IT.
Establish security guardrails for employee use of AI tools, with an enablement-first mindset.
Develop automation, integrations, and reusable engineering patterns to enhance the scalability and effectiveness of the security program.