Job Description
Gong transforms revenue organizations by harnessing customer interactions to increase business efficiency, improve decision-making, and accelerate revenue growth. The Revenue Intelligence Platform uses proprietary artificial intelligence technology to enable teams to capture, understand, and act on all customer interactions in a single, integrated platform. More than 4,000 companies around the world rely on Gong to support their go-to-market strategies and grow revenue efficiently.
Job Description:
- Lead Cross-Functional Teams: Lead cross-functional team activities, integrating advanced security best practices throughout the product development lifecycle.
- Security Assessments: Conduct and oversee regular security assessments, including in-depth code reviews, threat modeling, and vulnerability assessments, to identify and mitigate security weaknesses.
- Security Controls: Develop, implement, and automate sophisticated security controls and mechanisms to protect against unauthorized access, data breaches, and other security threats.
- Secure Architecture: Architect and design secure software and infrastructure components, ensuring scalability, reliability, and robustness.
- Cloud Security: Implement and manage cloud security measures, ensuring the security of our cloud infrastructure and services.
- Security Tools Utilization: Utilize security tools such as Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Interactive Application Security Testing (IAST) to identify and address security vulnerabilities.
- Mentorship: Mentor and guide developers and Dev Ops teams, fostering a culture of security awareness and continuous improvement.
Requirements:
- 5+ Years of Experience: In Information Security.
- Software Development Fundamentals: Extensive experience and deep understanding of software development fundamentals and secure coding principles.
- Cloud Platforms and Containerization: Proficiency in identifying and mitigating common and advanced security vulnerabilities and attack vectors, including an in-depth understanding of the OWASP Top 10.
- Version Control Systems and CI/CD Tools: Proficiency with version control systems and CI/CD tools such as Git Hub, Git Lab, Jenkins, and others.
- Security Tools and Analytical Skills: Experience with security tools such as Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Interactive Application Security Testing (IAST). Strong analytical and problem-solving skills with the ability to think critically and strategically.
About Gong:
At Gong, we trust and empower our employees with ownership to solve complex problems, make the right decisions, and build the best products that create radical impact.
We call it "Own. Solve. Impact." Our security team is at the forefront of a monumental shift in how we implement processes. Instead of simply saying "no," we embrace the mindset of "let's explore how we can make it work."