Senior DevSecOps Manager

Gong’s Cloud Engineering group is the infrastructure backbone of a platform that processes millions of customer interactions every day.

We’re looking for a DevSecOps Manager to lead our Israel-based DevSecOps team and own the security posture of Gong’s cloud infrastructure. You’ll inherit a strong, established team of DevOps and DevSecOps engineers with meaningful ownership and a mature security program.

This is a hands-on leadership role that combines people management, technical depth, and architectural influence. You’ll define the cloud security roadmap, remain close to the code and systems, and partner with Product Security, R&D, and Cloud Engineering to make security part of the platform by default.

• The security posture of Gong’s multi-cloud infrastructure across AWS, Azure, and GCP.
• Identity governance, least-privilege access, credential lifecycle management, and cloud vulnerability management.
• Security controls embedded directly into the cloud platform, enabling R&D teams to build and operate securely by default.
• Developer toolchain security, including CI/CD pipelines, software supply chain risks, and developer-facing guardrails.
• The implementation of security as code, replacing manual processes and ticket-based controls with scalable automation.
• The leadership, development, and technical growth of a team of DevOps and DevSecOps engineers.
• Team’s roadmap, priorities, and quarterly planning in alignment with Cloud Engineering and the broader Security organization.
• The team’s role as the primary cloud security partner for Product Security, R&D, and Cloud Engineering.
• Clear security standards, ownership boundaries, and operating practices across the cloud platform.

• Security challenges across a large, evolving environment with multiple production cells, several cloud providers, and more than 500 engineers.
• Gaps in cloud identity, permissions, credentials, workload protection, and vulnerability management.
• Security risks within Kubernetes, including RBAC, pod security, network policies, and runtime protection.
• Risks across GitHub, CI/CD pipelines, third-party dependencies, and the software supply chain.
• Friction between strong security controls and the speed, usability, and autonomy R&D teams need.
• Repetitive security work by turning manual controls into automated, reusable platform capabilities.
• Cross-functional challenges that require alignment between Cloud Engineering, Product Security, R&D, and compliance stakeholders.
• Emerging cloud security gaps by proactively identifying them, proposing practical solutions, and driving remediation through completion.

• Gong’s ability to operate a secure, resilient, and scalable multi-cloud platform.
• The security of the infrastructure supporting millions of customer interactions each day.
• Engineering velocity by providing secure-by-default capabilities and self-service guardrails.
• The effectiveness and consistency of cloud security controls across production environments.
• The maturity of Gong’s DevSecOps practices, automation, and security-as-code capabilities.
• The technical development of a strong team and its evolution into a center of cloud security expertise.
• Strategic decisions across Cloud Engineering through active participation in the Cloud Engineering management forum.
• How more than 500 engineers build, deploy, and operate secure applicative services at scale.

• An experienced engineering manager with at least two years of experience leading a DevSecOps, DevOps, platform, or cloud security team.
• A hands-on technical leader with at least 7 years of experience in DevOps and cloud security who can build and troubleshoot solutions - not only review them.
• Deeply experienced with AWS security services and controls (including IAM, SCPs, GuardDuty, CloudTrail, and KMS), and across Azure and GCP as well.
• Strong in Kubernetes security, including RBAC, pod security, network policies, and runtime tooling.
• Experienced in securing GitHub organizations and CI/CD pipelines built with technologies such as GitHub Actions and Jenkins.
• Familiar with cloud security posture management platforms such as Wiz, Orca Security, or Prisma Cloud.
• Fluent in infrastructure as code using Terraform, Crossplane, or equivalent technologies.
• Comfortable balancing security, developer experience, operational needs, and business priorities, Proactive and accountable, with a track record of identifying gaps and driving solutions through completion.

• Experience supporting compliance programs such as SOC 2, GDPR, or ISO 27001.
• Security certifications such as CKS, CISSP, or CISM.
• Experience with GitOps practices and tools such as Argo CD or Argo Workflows.

*We operate in a flexible hybrid work model.

What makes the Engineering organization at Gong unique?

At Gong, we build infrastructure that powers one of the leading AI platforms in the revenue space. Our engineering culture combines high ownership, technical excellence, and fast execution. We believe in solving complex problems with clarity, direct communication, and long-term thinking.

This is an opportunity to work across teams and influence the technical foundations of a category-defining product used by some of the world’s leading companies. You’ll partner with exceptional engineers and leaders while shaping how Gong scales for the future.

We encourage our employees to express their personality and identity, and we ensure fairness and equal opportunities. We follow a flexible hybrid work model that combines working from home, on the go, or at the office—supporting flexibility, autonomy, collaboration, and strong work habits. If these considerations are important to you when choosing a workplace, we’d love to meet you