Senior Cloud Security Engineer

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io.

At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career.

Senior Cloud Security Engineer

We’re looking for a Senior Cloud Security Engineer to help secure Gong’s cloud infrastructure across AWS, GCP, and Azure. As part of the Cloud Security team within the Platform Security group, you will build and operate scalable security capabilities across cloud platforms, identity, Kubernetes, workloads, and developer tooling. You will work closely with Application Security, DevSecOps, Cloud Engineering, Infrastructure, and R&D to establish secure-by-default foundations, reduce cloud risk, and enable engineering teams to move quickly and securely.

• Cloud security architecture and controls across AWS, GCP, and Azure, including identity, networking, workloads, data, and managed services.

• Gong’s cloud security posture management capabilities, including coverage, configuration, prioritization, and continuous improvement.

• Cloud vulnerability and risk management, from identification and prioritization through remediation and validation.

• Security guardrails for cloud infrastructure and Kubernetes, including IAM, workload identity, RBAC, network policies, secrets, and runtime protection.

• Cloud security monitoring, detection, and response capabilities across all supported cloud environments.

• Security automation and security-as-code, including reusable controls, policies, tooling, and developer-facing guardrails.

• Cloud misconfigurations, excessive permissions, exposed services, and other infrastructure-security risks.

• Visibility and accountability gaps across cloud security posture, vulnerabilities, and remediation.

• Security challenges involving identities, credentials, Kubernetes workloads, networks, and data.

• The need to embed effective security controls into engineering workflows without creating unnecessary friction.

• Emerging security risks associated with new architectures, AI services, and data-driven workloads.

• The security and resilience of Gong’s AWS, GCP, and Azure environments.

• A measurable reduction in cloud vulnerabilities, misconfigurations, excessive permissions, and recurring findings.

• The maturity of Gong’s CSPM, monitoring, vulnerability-management, and security-as-code capabilities.

• The ability of engineering teams to build and operate cloud services securely by default.

• Cloud-security decisions and standards through close collaboration with Platform Security, Application Security, DevSecOps, Cloud Engineering, and R&D.

• A senior