We aren’t looking for a dashboard-watcher; we need a Digital Architect of Chaos-Prevention who treats zero-days like morning coffee and builds automated fortresses before a threat even breaks a sweat. As our Senior Security Operations Engineer, you’re the lead mechanic of our invisible shield, welding code and hardening global infrastructure until it’s more secure.

If you’re a cloud-savvy defender who thrives when the stakes are high and hates manual toil, your new playground is ready.

What You’ll Actually Do:

• Chaos Wrangler: Orchestrate SIEM/SOAR tools like a digital Mozart. Help the analysts out by automating the boring tasks
• ThreatBuster: Proactively look for threats that haven’t even decided to move in yet. You’re not just reacting; you’re predicting!
• Trap Setter: You don’t wait for an antivirus to beep. You build custom logic, YARA rules, and Sigma signatures that catch attackers before they realize they’ve been spotted.
• Master the Multi-Cloud: AWS, GCP, Azure—you’re the gatekeeper of our cloud kingdom, ensuring our posture is tighter than a drum across every environment.
• Fortune Teller: You spend time in the dark corners of the web, so we don’t have to. You ingest feeds, analyze adversary actions, and turn exploit rumors into actionable defense strategies
• The Elite Mentor: You’re the leader the pack looks to. You’ll level up our junior analysts/engineers and set the gold standard during on-call rotations.
• The Cross-Functional Diplomat: You’ll bridge the gap among IT, DevOps, and Privacy, closing security gaps and ensuring the entire org is as resilient as the tech it uses.
• Total Autonomy: We don't micromanage; we empower. You see a gap? You fix it. Do you see a process that can be automated? You build it.

Required Qualification:

• 5+ years of experience in any of the following areas:
• Security Data Pipeline Engineering
• Detection Engineering
• SIEM Engineering
• Cyber Intelligence and Threat Hunting
• Security Platform Engineering
• Proficiency with EDR/XDR (CrowdStrike, SentinelOne, MS Defender), Cloud Security Posture Management (Wiz, Prisma Cloud, Orca), and WAFs (Cloudflare, Akamai).
• Experience building data ingestion pipelines using CI/CD methodologies.
• Proven experience building, testing, and tuning custom detection logic and familiarity with Query Languages (KQL, SQL, SPL) for automation needs.
• Familiarity with attack frameworks (MITRE ATT&CK)  and mitigation strategies.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.

Preferred Qualifications:

• Security certifications like GXPN, GCIA, GCTI, GCDA, or similar are a plus.
• Experience architecting stateful automation pipelines using Python, Go, and enterprise SOAR platforms
• Ability to read/audit Terraform, Pulumo, or CloudFormation, and experience with Infrastructure as a code(IaC)
• Experience with securing and monitoring containers within cloud environments 

What makes Security at Gong unique?

Here at Gong, we trust and empower our employees with ownership to solve complex problems, make the right decisions, and build the best products that create radical impact. We call it “Own. Solve. Impact.” 

Our security team is at the forefront of a monumental shift in how we implement processes. Instead of simply saying "no," we embrace the mindset of "let's explore how we can make it work." Our security team brings a wealth of backgrounds, experience, and wisdom to the table. Which means that age comes before security, or is it the other way around?

If you are curious to discover Gong's wonderful and challenging world, what are you waiting for? Don’t delay - fill in your application details. Who knows, maybe there’s a Gongster in you!