Senior DevSecOps Engineer

Job Description

Gong is seeking a Senior DevSecOps Engineer to address intricate security challenges, ranging from safeguarding cloud infrastructure to refining security measures. The ideal candidate will devise innovative strategies to boost operational efficiency across Gong's expanding systems. This role involves close collaboration with cross-functional teams to establish and implement security practices that guarantee the safety and compliance of the business.

Responsibilities:

• Securing and optimizing cloud services, primarily on AWS, ensuring robust security and compliance.
• Aligning with industry security best practices for DevOps services and tools.
• Supporting and enhancing monitoring and alerting systems to detect and respond to threats.
• Developing and implementing threat detection strategies to mitigate potential risks.
• Automating the deployment of security controls for consistent and scalable protection.
• Acting as a focal point for security and compliance queries within the DevSecOps team.

Requirements:

• 3+ years of DevOps experience with cloud security expertise.
• Proven ability to identify security risks and execute security strategies.
• Experience with security tools and scripting skills (preferably Python).
• Extensive knowledge of internet protocols and security design principles.
• Hands-on experience with AWS security services (IAM Policy, KMS, GuardDuty, etc.).
• Strong understanding of security projects (patching, vulnerability scanning, threat management).
• Ability to gather and maintain evidence for security and compliance.
• Self-motivated with a proactive approach.

Gong offers:

• Flexible hybrid work model.