Senior DevSecOps Manager

Gong
Tel Aviv, Israel

Who this role is best for

Geared toward experienced engineering managers comfortable with multi-cloud security and cross-functional leadership, based in Tel Aviv with a hybrid work model.

Best fit for

  • Experienced engineering managers with a strong background in cloud security and team leadership.
    — “At least two years of experience leading a DevSecOps, DevOps, platform, or cloud security team.
  • Candidates with deep technical expertise in Kubernetes and infrastructure-as-code tools.
    — “Strong in Kubernetes security, including RBAC, pod security, network policies, and runtime tooling.
  • Individuals who can balance security needs with developer productivity and operational efficiency.
    — “Comfortable balancing security, developer experience, operational needs, and business priorities

Things to consider

  • The role requires hands-on technical involvement, not just managerial oversight.
    — “hands-on leadership role that combines people management, technical depth, and architectural influence
  • Candidates must be prepared to manage a large-scale environment with over 500 engineers.
    — “Security challenges across a large, evolving environment with multiple production cells, several cloud providers, and more than 500 engineers.

How to stand out

  • Highlight experience in implementing security-as-code and automation.
    — “The implementation of security as code, replacing manual processes and ticket-based controls with scalable automation.
  • Emphasize your track record in identifying and resolving cloud security gaps.
    — “Proactive and accountable, with a track record of identifying gaps and driving solutions through completion.
  • Demonstrate your ability to lead and grow a team of DevOps and DevSecOps engineers.
    — “The leadership, development, and technical growth of a team of DevOps and DevSecOps engineers.
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · CompanyLevel · Senior

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • security posture of cloud infrastructure
  • security controls embedded into cloud platform
  • security as code implementation
Typical background
technical depth and architectural influence

Skills & requirements

Required

Cloud SecurityIdentity GovernanceLeast-privilege AccessCredential Lifecycle ManagementCloud Vulnerability ManagementSecurity ControlsDeveloper Toolchain SecurityCi/cd PipelinesSoftware Supply Chain RisksSecurity As Code

Preferred

Kubernetes SecurityGithub SecurityThird-party Dependencies

Stack & domain

Cloud SecurityIdentity GovernanceLeast-privilege AccessCredential Lifecycle ManagementCloud Vulnerability ManagementLeadershipProblem-solvingCommunicationTeamworkCloud InfrastructureDevSecOpsSecurity

About the role

Original posting from Gong via Greenhouse

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io.

At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career.

Gong’s Cloud Engineering group is the infrastructure backbone of a platform that processes millions of customer interactions every day.

We’re looking for a DevSecOps Manager to lead our Israel-based DevSecOps team and own the security posture of Gong’s cloud infrastructure. You’ll inherit a strong, established team of DevOps and DevSecOps engineers with meaningful ownership and a mature security program.

This is a hands-on leadership role that combines people management, technical depth, and architectural influence. You’ll define the cloud security roadmap, remain close to the code and systems, and partner with Product Security, R&D, and Cloud Engineering to make security part of the platform by default.

You’ll own:

The security posture of Gong’s multi-cloud infrastructure across AWS, Azure, and GCP.

Identity governance, least-privilege access, credential lifecycle management, and cloud vulnerability management.

Security controls embedded directly into the cloud platform, enabling R&D teams to build and operate securely by default.

Developer toolchain security, including CI/CD pipelines, software supply chain risks, and developer-facing guardrails.

The implementation of security as code, replacing manual processes and ticket-based controls with scalable automation.

The leadership, development, and technical growth of a team of DevOps and DevSecOps engineers.

Team’s roadmap, priorities, and quarterly planning in alignment with Cloud Engineering and the broader Security organization.

The team’s role as the primary cloud security partner for Product Security, R&D, and Cloud Engineering.

Clear security standards, ownership boundaries, and operating practices across the cloud platform.

You’ll solve:

Security challenges across a large, evolving environment with multiple production cells, several cloud providers, and more than 500 engineers.

Gaps in cloud identity, permissions, credentials, workload protection, and vulnerability management.

Security risks within Kubernetes, including RBAC, pod security, network policies, and runtime protection.

Risks across GitHub, CI/CD pipelines, third-party dependencies, and the software supply chain.

Friction between strong security controls and the speed, usability, and autonomy R&D teams need.

Repetitive security work by turning manual controls into automated, reusable platform capabilities.

Cross-functional challenges that require alignment between Cloud Engineering, Product Security, R&D, and compliance stakeholders.

Emerging cloud security gaps by proactively identifying them, proposing practical solutions, and driving remediation through completion.

You’ll impact:

Gong’s ability to operate a secure, resilient, and scalable multi-cloud platform.

The security of the infrastructure supporting millions of customer interactions each day.

Engineering velocity by providing secure-by-default capabilities and self-service guardrails.

The effectiveness and consistency of cloud security controls across production environments.

The maturity of Gong’s DevSecOps practices, automation, and security-as-code capabilities.

The technical development of a strong team and its evolution into a center of cloud security expertise.

Strategic decisions across Cloud Engineering through active participation in the Cloud Engineering management forum.

How more than 500 engineers build, deploy, and operate secure applicative services at scale.

You are:

An experienced engineering manager with at least two years of experience leading a DevSecOps, DevOps, platform, or cloud security team.

A hands-on technical leader with at least 7 years of experience in DevOps and cloud security who can build and troubleshoot solutions - not only review them.

Deeply experienced with AWS security services and controls (including IAM, SCPs, GuardDuty, CloudTrail, and KMS), and across Azure and GCP as well.

Strong in Kubernetes security, including RBAC, pod security, network policies, and runtime tooling.

Experienced in securing GitHub organizations and CI/CD pipelines built with technologies such as GitHub Actions and Jenkins.

Familiar with cloud security posture management platforms such as Wiz, Orca Security, or Prisma Cloud.

Fluent in infrastructure as code using Terraform, Crossplane, or equivalent technologies.

Comfortable balancing security, developer experience, operational needs, and business priorities, Proactive and accountable, with a track record of identifying gaps and driving solutions through completion.

An advantage:

Experience supporting compliance programs such as SOC 2, GDPR, or ISO 27001.

Security certifications such as CKS, CISSP, or CISM.

Experience with GitOps practices and tools such as Argo CD or Argo Workflows.

*We operate in a flexible hybrid work model.

What makes the Engineering organization at Gong unique?

At Gong, we build infrastructure that powers one of the leading AI platforms in the revenue space. Our engineering culture combines high ownership, technical excellence, and fast execution. We believe in solving complex problems with clarity, direct communication, and long-term thinking.

This is an opportunity to work across teams and influence the technical foundations of a category-defining product used by some of the world’s leading companies. You’ll partner with exceptional engineers and leaders while shaping how Gong scales for the future.

We encourage our employees to express their personality and identity, and we ensure fairness and equal opportunities. We follow a flexible hybrid work model that combines working from home, on the go, or at the office—supporting flexibility, autonomy, collaboration, and strong work habits. If these considerations are important to you when choosing a workplace, we’d love to meet you

Source: Gong careers (Greenhouse)

Similar roles