Senior Application Security Engineer
M&T BankSalary not specified
Full Time
Senior (5 to 8 years), Expert & Leadership (9+ years)
Not SpecifiedCompensation
Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level
Full TimeJob Type
UnknownVisa
Technology, SaaSIndustries
Requirements
- 8+ years of experience in Information Security
- Extensive experience in designing, implementing, and managing security architectures for complex applications
- Deep understanding of application security principles, frameworks, and standards (e.g., OWASP, NIST)
- Strong knowledge of authentication, authorization, encryption, and other security protocols
- Hands-on experience designing and building secure web/mobile applications, systems, or networks
- Familiarity with security methodologies and industry standards (e.g., ISO27001, PCI-DSS, GDPR)
- Proficiency in secure software development practices, including Secure Software Development Life Cycle (SSDLC) and DevSecOps practices
- Experience securing Cloud environment
Responsibilities
- Design secure systems and conduct threat modeling for new and existing features
- Review, identify and mitigate security risks in architecture, applications, and infrastructure levels
- Perform regular security assessments and audits to identify vulnerabilities and ensure compliance with security standards
- Develop, maintain, and audit information security policies and guidelines
- Actively influence the product and services roadmap and security implementation
- Continually improve Secure Development Lifecycle (SDLC) practices within R&D and Product units
- Integrate security best practices into CI/CD pipelines and development workflows
- Ensure the effectiveness of processes and controls to meet multiple standards, regulations, and audits, such as ISO27001, PCI-DSS, and more
- Provide guidance and mentorship to development teams on secure coding practices and security principles
- Collaborate with cross-functional teams, including developers, product managers, DevOps and more, to ensure security is integrated into all aspects of the R&D
- Communicate security risks and recommendations to technical and non-technical stakeholders effectively
- Review new tools and processes to detect security threats
- For management review, generate regular reports on security posture, vulnerabilities, and compliance status
Skills
Threat Modeling
Security Architecture
Vulnerability Assessment
Security Audits
SDLC
CI/CD
Secure Coding
ISO27001
PCI-DSS
Compliance
Gong.io
Revenue intelligence platform for customer interactions
About Gong.io
Gong provides a platform focused on revenue intelligence, which helps businesses capture and analyze customer interactions. The platform uses artificial intelligence to integrate various customer communications into one system, allowing companies to gain insights that inform their decision-making and enhance revenue growth. Gong caters to a wide array of clients, including sales, marketing, and customer success teams across different industries. Its subscription-based model allows organizations to pay for access to the platform, with pricing tiers based on user count and desired features. The main goal of Gong is to support businesses in optimizing their go-to-market strategies by delivering actionable insights derived from customer data.
San Francisco, CaliforniaHeadquarters
2015Year Founded
$570.1MTotal Funding
SERIES_ECompany Stage
Enterprise Software, AI & Machine LearningIndustries
1,001-5,000Employees
Benefits
Mental health support resources
Weekly wellness events
Work from home stipend
Generous vacation days
Quarterly recharge company shutdowns
Parental leave
Employee equity
Retirement savings & financial coaches
Commuter & parking benefits
Training & learning programs
Monthly lunch & learns
Mentor & buddy programs
Risks
Increased competition from Highspot and Seismic may pressure Gong's market share.
Rapid market growth could attract new entrants, impacting Gong's growth trajectory.
Challenges in measuring AI success may affect customer retention and acquisition.
Differentiation
Gong's platform integrates all customer interactions into a single system for better insights.
The company uses proprietary AI to analyze customer interactions, enhancing decision-making.
Gong's subscription model offers tiered access based on user numbers and functionality.
Upsides
Gong's integration with ChurnZero enhances customer success management with AI-driven insights.
The company's inclusion in Forbes Cloud 100 highlights its market leadership and innovation.
Gong's 'Ask Anything' solution boosts win rates by 26%, enhancing revenue team efficiency.
Related Jobs
RemoteRemoteSoftware Architect
CrowdboticsSalary not specified
- Full Time
- Expert & Leadership (9+ years)
RemoteSenior Cloud Security Architect (R-00079)
True Zero TechnologiesSalary not specified
- Full Time
- Senior (5 to 8 years), Expert & Leadership (9+ years)
RemoteEnterprise Architect
AdobeSalary not specified
- Full Time
- Expert & Leadership (9+ years)
RemotePrincipal DevSecOps Engineer
Second Front SystemsSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteSecurity Architect
EarnestSalary not specified
- Full Time
- Expert & Leadership (9+ years)
RemoteProduct Security Tech Lead
TetraScienceSalary not specified
- Full Time
- Junior (1 to 2 years)
RemoteSenior Information Security Specialist-SECRET CLEARANCE REQUIRED
Latitude AISalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteCyber Security Architecture
GE HealthcareSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteCyber Threat Analyst
ArcadiaSalary not specified
RemoteProduct Security Engineer
YubicoSalary not specified
RemoteApplication Security Lead
Accurate BackgroundSalary not specified
- Full Time
- Expert & Leadership (9+ years)
RemoteEngineering Manager, Application Security - Product Security (Remote)
CrowdstrikeSalary not specified