# Senior Cyber Defense Engineer

**Company**: Gong
**Location**: Tel Aviv
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/gongio/jobs/4677810006?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_f12a4a5e-448

## Description

At Gong, you will join a company built on innovative products, ambitious goals, and passionate people.

We're looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.

You’ll design, implement, and mature the security controls that protect Gong’s business applications, workforce, and corporate environment.

## Responsibilities

You’ll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale.

You’ll own:

- The security posture of Gong’s corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security.

- Zero Trust access policies for workforce and external users, along with hardening for macOS, Windows, and Linux endpoints, browsers, SaaS applications, and corporate networks.

- Identity and access capabilities, including SSO, phishing-resistant MFA, passwordless authentication, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene.

- The evaluation and rollout of new security technologies, taking solutions from proof of concept through production.

- Automated workflows and API integrations that scale security controls without adding operational overhead or headcount.

- SaaS, third-party, and AI governance, including SaaS configuration reviews, vendor security assessments, access reviews, OAuth governance, posture remediation, and enablement-first guardrails for employee AI tools.

- Domain expertise for SecOps incident response and partnership with IT and R&D to embed security standards and operating procedures into day-to-day processes.

## Challenges

You’ll solve:

- How to protect a fast-growing SaaS company’s corporate environment across a broad and evolving technology stack.

- How to translate security risks into clear requirements, practical controls, and reliable production operations.

- How to strengthen identity, endpoint, SaaS, network, email, and collaboration security through a unified Zero Trust approach.

- How to automate security processes and integrate systems so controls remain effective as Gong scales.

- How to enable employees to use SaaS and AI tools safely through thoughtful guardrails rather than blanket restrictions.

- How to make security standards easy for partner teams to adopt by embedding them into operational workflows and SOPs.

## Impact

You’ll impact:

- The security and resilience of Gong’s business applications, workforce, and corporate environment.

- Gong’s ability to scale securely through stronger identity-centric controls, Zero Trust access, endpoint hardening, and SaaS governance.

- The maturity of the corporate security program by improving posture management, remediation, automation, and operational consistency.

- The effectiveness of Cyber Defense incident response through hands-on technical expertise and strong cross-functional partnership.

- The safe adoption of emerging technologies, including AI tools, AI agents, agentic workflows, and low-code/no-code platforms.

- A security culture that helps teams move quickly and responsibly by exploring how to make things work securely.

## Requirements

You bring:

- 5+ years of experience in cybersecurity engineering, ideally in a high-growth SaaS environment.

- Hands-on expertise with identity platforms, including Okta or Entra ID, plus experience in at least two of the following areas: data security, DLP/DSPM, endpoint security, EDR/BDR, email security, or network/SASE.

- Practical experience with SSO, MFA, RBAC, SCIM, Zero Trust, and SSPM platforms.

- Experience evaluating SaaS and application security, with an understanding of common security frameworks such as CIS, NIST, and OWASP.

- An engineering mindset: you build automation, API integrations, and workflows rather than focusing only on tool administration.

- The ability to drive security through strong relationships, communicate effectively across teams, and take ownership of complex problems.

- An AI-first, hands-on problem-solving mindset.

- Fluent English and the ability to work effectively with global teams.

## Nice to Have

Strong advantages:

- Experience securing AI agents, agentic workflows, or low-code/no-code platforms.

- Offensive security knowledge.

- Familiarity with emerging SaaS threats, including OAuth abuse, token theft, and identity-based attacks.

## Skills

### Required
- cybersecurity engineering
- identity platforms
- data security
- DLP/DSPM
- endpoint security
- EDR/BDR
- email security
- network/SASE
- SSO
- MFA
- RBAC
- SCIM
- Zero Trust
- SSPM platforms
- SaaS and application security
- CIS
- NIST
- OWASP

### Nice to have
- securing AI agents
- agentic workflows
- low-code/no-code platforms
- offensive security knowledge
- emerging SaaS threats
- OAuth abuse
- token theft
- identity-based attacks

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/gongio/jobs/4677810006?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)