Senior DevSecOps Manager

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career. Gong’s Cloud Engineering group is the infrastructure backbone of a platform that processes millions of customer interactions every day. We’re looking for a DevSecOps Manager to lead our Israel-based DevSecOps team and own the security posture of Gong’s cloud infrastructure. You’ll inherit a strong, established team of DevOps and DevSecOps engineers with meaningful ownership and a mature security program. This is a hands-on leadership role that combines people management, technical depth, and architectural influence. You’ll define the cloud security roadmap, remain close to the code and systems, and partner with Product Security, R&D, and Cloud Engineering to make security part of the platform by default. You’ll own: • The security posture of Gong’s multi-cloud infrastructure across AWS, Azure, and GCP. • Identity governance, least-privilege access, credential lifecycle management, and cloud vulnerability management. • Security controls embedded directly into the cloud platform, enabling R&D teams to build and operate securely by default. • Developer toolchain security, including CI/CD pipelines, software supply chain risks, and developer-facing guardrails. • The implementation of security as code, replacing manual processes and ticket-based controls with scalable automation. • The leadership, development, and technical growth of a team of DevOps and DevSecOps engineers. • Team’s roadmap, priorities, and quarterly planning in alignment with Cloud Engineering and the broader Security organization. • The team’s role as the primary cloud security partner for Product Security, R&D, and Cloud Engineering. • Clear security standards, ownership boundaries, and operating practices across the cloud platform. You’ll solve: • Security challenges across a large, evolving environment with multiple production cells, several cloud providers, and more than 500 engineers. • Gaps in cloud identity, permissions, credentials, workload protection, and vulnerability management. • Security risks within Kubernetes, including RBAC, pod security, network policies, and runtime protection. • Risks across GitHub, CI/CD pipelines, third-party dependencies, and the software supply chain. • Friction between strong security controls and the speed, usability, and autonomy R&D teams need. • Repetitive security work by turning manual controls into automated, reusable platform capabilities. • Cross-functional challenges that require alignment between Cloud Engineering, Product Security, R&D, and compliance stakeholders. • Emerging cloud security gaps by proactively identifying them, proposing practical solutions, and driving remed