Product Security Architect - Remote

Overview

Gong transforms revenue organizations by harnessing customer interactions to increase business efficiency, improve decision-making and accelerate revenue growth. The Revenue Intelligence Platform uses proprietary artificial intelligence technology to enable teams to capture, understand and act on all customer interactions in a single, integrated platform. More than 4,000 companies around the world rely on Gong to support their go-to-market strategies and grow revenue efficiently. For more information, visit www.gong.io.

In Short

• Design secure systems and conduct threat modeling for new and existing features.
• Review, identify and mitigate security risks in architecture, applications, and infrastructure levels.
• Perform regular security assessments and audits to identify vulnerabilities and ensure compliance with security standards.
• Develop, maintain, and audit information security policies and guidelines.
• Actively influence the product and services roadmap and security implementation.
• Continually improve Secure Development Lifecycle (SDLC) practices within R&D and Product units.
• Integrate security best practices into CI/CD pipelines and development workflows.
• Ensure the effectiveness of processes and controls to meet multiple standards, regulations, and audits, such as ISO27001, PCI-DSS, and more.
• Provide guidance and mentorship to development teams on secure coding practices and security principles.
• Collaborate with cross-functional teams, including developers, product managers, DevOps and more, to ensure security is integrated into all aspects of the R&D.

Requirements

• 8+ years of experience in Information Security.
• Extensive experience in designing, implementing, and managing security architectures for complex applications.
• Deep understanding of application security principles, frameworks, and standards (e.g., OWASP, NIST).
• Strong knowledge of authentication, authorization, encryption, and other security protocols.
• Hands-on experience designing and building secure web/mobile applications, systems, or networks.
• Familiarity with security methodologies and industry standards (e.g., ISO27001, PCI-DSS, GDPR).
• Proficiency in secure software development practices, including Secure Software Development Life Cycle (SSDLC) and DevSecOps practices.
• Experience securing Cloud environments (AWS, GCP, and/or Azure) and networks.
• Ability to conduct risk assessments, threat modeling, and vulnerability assessments.
• Excellent communication skills, both written and verbal, to effectively convey security concepts to technical and non-technical stakeholders.

Benefits

• Education & learning stipend to support your personal growth and development.
• Annual Leave / Paid Parental leave to support you and your family.
• Company-wide recharge days each quarter.
• Work from home allowance to help you succeed in a remote environment.