At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career.
🏢 About Gong
Gong is a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact.
🎯 The Role
Senior Cloud Security Engineer
✅ Key Responsibilities
Cloud security architecture and controls across AWS, GCP, and Azure, including identity, networking, workloads, data, and managed services.
Gong’s cloud security posture management capabilities, including coverage, configuration, prioritization, and continuous improvement.
Cloud vulnerability and risk management, from identification and prioritization through remediation and validation.
Security guardrails for cloud infrastructure and Kubernetes, including IAM, workload identity, RBAC, network policies, secrets, and runtime protection.
Cloud security monitoring, detection, and response capabilities across all supported cloud environments.
Security automation and security-as-code, including reusable controls, policies, tooling, and developer-facing guardrails.
📌 Required Qualifications
A senior security engineer with at least 5 years of experience in Cloud Security, Infrastructure Security, Platform Security, or a closely related discipline.
Experienced in designing and implementing security controls across cloud-native environments.
Strong in cloud identity, least privilege, workload identities, service accounts, secrets management, and credential lifecycle security.
Experienced with CSPM, cloud vulnerability management, security monitoring, and security findings remediation.
Experienced in securing Kubernetes environments, including RBAC, workload identity, pod security, network policies, secrets, and runtime controls.
Proficient with infrastructure as code, policy as code, and security automation using Terraform, Python, or similar technologies.
Comfortable with working across AWS, GCP, and Azure, with the ability to transfer security principles between platforms.
Familiar with CI/CD, GitOps, GitHub, software supply-chain security, and developer platforms.
Able to investigate security issues, identify root causes, and drive remediation through completion.
Collaborative, pragmatic, and able to influence engineering teams without formal authority.
⭐ Desirable Experience
Experience with security certifications such as CISSP, CCSP, CCSK, CKS, or cloud-security certifications.
🎁 Benefits
Here at Gong, we trust and empower our employees with ownership to solve complex problems, make the right decisions, and build the best products that create radical impact. We call it “Own. Solve. Impact.”
Our security team is at the forefront of a monumental shift in implementing processes. Instead of simply saying “no,” we embrace the mindset of “let’s explore how we can make it work.” Our security team brings a wealth of backgrounds, experience, and wisdom to the table.
We encourage our employees to express their personality and identity, and we ensure fairness and equal opportunities. We follow a hybrid working model that combines working from home, on the go, or at the office. This allows us flexibility, autonomy, positive work relationships, and effective work habits.
