Sr Manager, Cyber Defense & Engineering

Gong.io•Salt Lake City, UT

1d•$159,000 - $242,000

About The Position

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career. We’re looking for a visionary corporate cyber defense leader to architect and scale the security foundations that protect how Gong employees work across devices, identity, AI, SaaS, email, collaboration, and access. You will shape the future of Corporate Security Engineering within Gong’s Cyber Defense group by building a high-performing team, operating model, and technical strategy that enables a global, distributed, AI-native workforce to move quickly and securely. Together we will build a world-class corporate defense capability that keeps pace with Gong’s growth, strengthens trust, and turns preventative security into a strategic advantage for the business.

Requirements

A technical security leader who enjoys building teams, systems, and operating models in equal measure.
Experienced in people leadership or team leadership, and deeply credible in modern corporate security engineering or enterprise security engineering domains.
Strong across several of the following areas: endpoint security, identity security, PAM, email security, collaboration security, SSPM, ZTNA, DLP, insider risk, and corporate vulnerability management.
Passionate about building secure-by-default controls, automation, and practical guardrails that help the business move faster.
Comfortable influencing cross-functional stakeholders without relying on formal authority alone.
Skilled at hiring, mentoring, calibrating performance, and developing strong talent while maintaining a high bar.
Pragmatic, metrics-oriented, and able to balance security rigor with usability and operational reality.
Excited to define what great corporate cyber defense leadership looks like at an AI-native company.

Responsibilities

The strategy, operating model, and execution of Corporate Security Engineering within Gong’s Cyber Defense group.
Leading the Corporate Security Engineering team and growing a high-performing organization with strong technical depth, execution rigor, and clear ownership.
Endpoint security across a global macOS, Windows, and Linux fleet, including EDR coverage, sensor health, policy, exclusions, and hardening baselines with IT and MDM partners.
Identity and access security, including SSO, phishing-resistant MFA, passwordless adoption, conditional access, device trust, privileged access management, joiner-mover-leaver controls, and service account hygiene.
Email and collaboration security, including anti-phishing and BEC controls, DMARC/SPF/DKIM enforcement, malicious-content protection, and reported-phish automation with DRE.
SaaS security posture management, including OAuth and third-party app governance, shadow SaaS discovery, and security review partnership with GRC and Procurement.
Zero trust and corporate network security for a distributed workforce, including ZTNA, office security, segmentation, certificate trust, and Wi-Fi security.
Data protection and insider-risk tooling across endpoint, email, browser, and SaaS channels, with focus on Gong’s crown-jewel data paths.
Corporate vulnerability and baseline management, including patch policy, SLAs, hardening standards, and operational accountability with IT.
Security guardrails for employee use of AI tools, with an enablement-first mindset rather than a blanket-blocking approach.
Metrics and operating discipline across coverage, health, adoption, SLA performance, remediation speed, and security friction.