Senior Cyber Defense Engineer

About the role

Gong is looking for a Senior Cyber Defense Engineer to design, implement and scale security controls across endpoints, identity, SaaS, email, collaboration, zero‑trust access and data protection for its global workforce. The role sits in Corporate Security Engineering within the Cyber Defense organization and requires a hands‑on builder mindset.

Key responsibilities

• Own and evolve endpoint security for macOS, Windows and Linux fleets, including EDR coverage, hardening baselines and containment readiness.
• Drive identity and access initiatives such as SSO, phishing‑resistant MFA, passwordless adoption, conditional access, device trust and privileged‑access‑management.
• Implement email and collaboration security controls for platforms like Slack, Drive and corporate email.
• Manage SaaS security posture, shadow‑SaaS discovery and OAuth governance.
• Develop zero‑trust network controls and data‑protection/insider‑risk capabilities across endpoints, browsers and SaaS channels.

Required profile

• Senior‑level security professional with a track record of planning, designing and scaling corporate security programs.
• Hands‑on experience in corporate or enterprise security engineering within modern SaaS or cloud environments.
• Proven ability to build automation, APIs, workflows and integrations that make security operations scalable.
• Comfortable partnering with IT, engineering, legal and GRC teams to ship usable security solutions.
• Mentor who raises technical standards and helps others grow.

Required skills

• EDR/XDR platforms such as CrowdStrike, SentinelOne or Microsoft Defender.
• Cloud security posture management tools like Wiz, Prisma Cloud or Orca.
• Web application firewalls (Cloudflare, Akamai) and zero‑trust security platforms.
• Automation and CI/CD pipelines for security data ingestion.
• Query languages (KQL, SQL, SPL) for detection logic.
• Familiarity with MITRE ATT&CK framework.
• Expertise in endpoint, identity, Privileged Access Management, email, collaboration, SSPM, ZTNA, DLP, insider‑risk and vulnerability management.