Back to jobs
New

Senior Security Detections Engineer

Austin | Chicago | New York City | Salt Lake City | San Francisco

Gong transforms revenue organizations by harnessing customer interactions to increase business efficiency, improve decision-making and accelerate revenue growth. The Revenue Intelligence Platform uses proprietary artificial intelligence technology to enable teams to capture, understand and act on all customer interactions in a single, integrated platform. More than 4,000 companies around the world rely on Gong to support their go-to-market strategies and grow revenue efficiently. For more information, visit www.gong.io.

As a member of security operations, you’ll play a key role in ensuring trust and security are core to day-to-day operations.  This will be a hands-on position as we mature our security team, and you will be responsible for improving and automating our security operations practices.

This is a blended role unique to Gong's threat landscape which encompasses not just the technology stack but also the broader team responsibilities.  This role will be responsible for advancing the security program in multiple areas within security operations including: data engineering, automation, hunting, and managing the detection lifecycle. The ideal candidate will have a strong background in scripting and automation, as well as experience in developing custom content within SQL products such as Snowflake to support our data analytics and reporting needs.

RESPONSIBILITIES
  • Creating custom SIEM queries and dashboards to support the monitoring and detection of advanced TTPs against Gong’s enterprise environment
  • Develop new detection logic and tune existing sensors/security controls. 
  • Actively research cybersecurity exploits, vulnerabilities, techniques, and tactics
  • Analyze and tune logs, events, and SIEM alerts, identifying trends and patterns that may require early action
  • Perform incident response investigation from escalated events on various workloads / systems
  • Perform host-based analysis, artifact analysis, network packet analysis, and malware analysis in support of security investigations and incident response. 
  • Coordinate security investigations, endpoint containment, and other response activities with business stakeholders and support teams.
  • Work with security solutions owners to assess existing security solutions array ability to detect/mitigate the IOCs, and TTPs. 
  • Responsible for deploying and supporting tools to collect and correlate security telemetry. 
  • Leverage automation & APIs where possible in support of SecOps, IR and the security program. (As needed)
  • Develop and maintain effective documentation, including response playbooks, processes, and other supporting operational material.
  • Communicate cybersecurity risks and solutions to various technical and non-technical audiences and levels of management.
  • Generate reports for both technical and non-technical staff and stakeholders
  • Assist with internal and external audits relating to information security
  • Comply with HIPAA and SOC-II, Diversity Principles, Corporate Integrity, Compliance Program policies, and other applicable corporate and departmental policies.
QUALIFICATIONS 
  • 7+ years of security operations experience
  • Experience with detection engineering, threat hunting and incident response in a cloud environment
  • Experience developing security automation with Python, AWS, and workflow automation tools
  • In-depth knowledge of SIEM (Security Information Event Management) and data lakes such as Snowflake
  • Experience in developing custom content within Snowflake, including stored procedures, user-defined functions, and complex SQL queries against large datasets of endpoint and network telemetry
  • Building custom threat detection tooling and frameworks
  • AWS Experience including Guard Duty, S3 Storage, Cloudtrail, etc.
  • Experience with Google Cloud Platform
  • Familiarity with attack frameworks and mitigation
  • Relevant security certifications such as the GCDA, and GMON is a plus
  • Research, build, and maintain detections for the latest threats identified through SIEM correlations, active/past incidents & threat intelligence sources
  • Ability to collect and audit logging capabilities of internal services, SaaS systems, and work with engineering teams in improving log visibility for Security Operations engineers
  • Experience building data ingestion pipelines for large(GB/TB) unstructured data volumes
  • Familiarity with data normalization, cleansing and sanitation lifecycle
  • Experience dissecting an attackers techniques & methodologies while translating to custom detections is a plus
PERKS & BENEFITS 
  • We offer Gongsters a variety of medical, dental, and vision plans, designed to fit you and your family’s needs.
  • Wellbeing Fund - flexible wellness stipend to support a healthy lifestyle.
  • Mental Health benefits with covered therapy and coaching.
  • 401(k) program to help you invest in your future.
  • Education & learning stipend for personal growth and development.
  • Flexible vacation time to promote a healthy work-life blend.
  • Paid parental leave to support you and your family.
  • Company-wide recharge days each quarter.
  • Work from home stipend to help you succeed in a remote environment.

The annual salary hiring range for this position is $153,000 - $180,000 USD. 

Compensation is based on factors unique to each candidate, including, but not limited to, job-related skills, qualification, education, experience, and location. At Gong, we have a location-based compensation structure, which means there may be a different range for candidates in other locations. The total compensation package for this position, in addition to base compensation, may include incentive compensation, bonus, equity, and benefits. Some of our sales compensation programs also offer the potential to achieve above targeted earnings for those who exceed their sales targets.

We are always looking for outstanding Gongsters! So if this sounds like something that interests you regardless of compensation, please reach out. We may have more roles for you to consider and would love to connect.

We have noticed a rise in recruiting impersonations across the industry, where scammers attempt to access candidates' personal and financial information through fake interviews and offers. All Gong recruiting email communications will always come from the @gong.io domain. Any outreach claiming to be from Gong via other sources should be ignored.

Gong is an equal-opportunity employer. We believe that diversity is integral to our success, and do not discriminate based on race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, military status, genetic information, or any other basis protected by applicable law.

To review Gong's privacy policy, visit https://www.gong.io/gong-io-job-candidates-privacy-notice/ for more details.

#LI-AC1

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...

Gong will collect and use your personal data (e.g. - name, email, resume info) to evaluate your application for employment. Gong will save your personal data for up to 2 years in order to consider you for other, future potential job opportunities. We are happy to delete your data upon request. 

For a list of personal data categories, how Gong uses your personal data, and rights you have to your personal data, please visit Gong’s Job Candidates Privacy Notice, available at https://www.gong.io/gong-io-job-candidates-privacy-notice/

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Gong.io’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.