Senior Application Security Engineer
M&T BankSalary not specified
Full Time
Senior (5 to 8 years), Expert & Leadership (9+ years)
$144,000 – $180,000Compensation
Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level
Full TimeJob Type
UnknownVisa
TechnologyIndustries
Requirements
- Strong expertise in security architecture, threat modeling, and vulnerability assessments
- Hands-on experience securing web/mobile applications, cloud environments (AWS, GCP, Azure), and networks
- Deep knowledge of authentication, encryption, authorization, and security frameworks like OWASP and NIST
- Experience in DevSecOps, SSDLC, and secure software development
- Excellent communication and collaboration skills
- Proven leadership and mentorship skills
Responsibilities
- Designing secure systems and conducting threat modeling for new and existing features
- Identifying and mitigating security risks in architecture, applications, and infrastructure
- Performing security assessments, audits, and ensuring compliance with standards like ISO27001, PCI-DSS, and GDPR
- Integrating security best practices into CI/CD pipelines and development workflows
- Improving Secure Development Lifecycle (SDLC) practices within R&D and Product units
- Providing guidance and mentorship to development teams on secure coding and security principles
- Collaborating with engineering, product, and DevOps teams to embed security into all aspects of development
- Reviewing tools and processes to detect security threats and enhance security posture
- Communicating security risks and recommendations to technical and non-technical stakeholders
Skills
Key technologies and capabilities for this role
Questions & Answers
Common questions about this position
What is the salary range for the Product Security Architect position?
The salary range is $144,000 - $180,000 USD.
Is this position remote?
Yes, this is a remote position.
What skills are required for this role?
Required skills include strong expertise in security architecture, threat modeling, and vulnerability assessments; hands-on experience securing web/mobile applications, cloud environments (AWS, GCP, Azure), and networks; deep knowledge of authentication, encryption, authorization, and frameworks like OWASP and NIST; experience in DevSecOps, SSDLC, and secure software development; plus excellent communication, collaboration, leadership, and mentorship skills.
What benefits does Gong.io offer?
Benefits include medical, dental, and vision plans; wellbeing fund; mental health benefits; 401(k) program; education stipend; flexible vacation; paid parental leave; quarterly recharge days; and work from home stipend.
What makes a strong candidate for this Product Security Architect role?
A strong candidate has proven expertise in security architecture, threat modeling, cloud security across AWS/GCP/Azure, DevSecOps practices, and strong leadership skills to mentor teams and collaborate across engineering, product, and DevOps.
Gong.io
Revenue intelligence platform for customer interactions
About Gong.io
Gong provides a platform focused on revenue intelligence, which helps businesses capture and analyze customer interactions. The platform uses artificial intelligence to integrate various customer communications into one system, allowing companies to gain insights that inform their decision-making and enhance revenue growth. Gong caters to a wide array of clients, including sales, marketing, and customer success teams across different industries. Its subscription-based model allows organizations to pay for access to the platform, with pricing tiers based on user count and desired features. The main goal of Gong is to support businesses in optimizing their go-to-market strategies by delivering actionable insights derived from customer data.
San Francisco, CaliforniaHeadquarters
2015Year Founded
$570.1MTotal Funding
SERIES_ECompany Stage
Enterprise Software, AI & Machine LearningIndustries
1,001-5,000Employees
Benefits
Mental health support resources
Weekly wellness events
Work from home stipend
Generous vacation days
Quarterly recharge company shutdowns
Parental leave
Employee equity
Retirement savings & financial coaches
Commuter & parking benefits
Training & learning programs
Monthly lunch & learns
Mentor & buddy programs
Risks
Increased competition from Highspot and Seismic may pressure Gong's market share.
Rapid market growth could attract new entrants, impacting Gong's growth trajectory.
Challenges in measuring AI success may affect customer retention and acquisition.
Differentiation
Gong's platform integrates all customer interactions into a single system for better insights.
The company uses proprietary AI to analyze customer interactions, enhancing decision-making.
Gong's subscription model offers tiered access based on user numbers and functionality.
Upsides
Gong's integration with ChurnZero enhances customer success management with AI-driven insights.
The company's inclusion in Forbes Cloud 100 highlights its market leadership and innovation.
Gong's 'Ask Anything' solution boosts win rates by 26%, enhancing revenue team efficiency.
Related Jobs
RemoteRemoteSenior Cloud Security Architect (R-00079)
True Zero TechnologiesSalary not specified
- Full Time
- Senior (5 to 8 years), Expert & Leadership (9+ years)
RemotePrincipal DevSecOps Engineer
Second Front SystemsSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteSecurity Engineer
Stitch FixSalary not specified
- Full Time
- Junior (1 to 2 years)
RemoteCyber Threat Analyst
ArcadiaSalary not specified
RemoteSenior Security Analyst, Vulnerability Management
VantaSalary not specified
RemoteProduct Security Tech Lead
TetraScienceSalary not specified
- Full Time
- Junior (1 to 2 years)
RemoteSecurity Architect
EarnestSalary not specified
- Full Time
- Expert & Leadership (9+ years)
RemoteEnterprise Architect
AdobeSalary not specified
- Full Time
- Expert & Leadership (9+ years)
RemoteApplication Security Lead
Accurate BackgroundSalary not specified
- Full Time
- Expert & Leadership (9+ years)
RemoteSenior Security Engineer, Application Security
Trail of BitsSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteProduct Security Engineer
YubicoSalary not specified
RemoteSecurity Engineer, Product Security
Chainlink LabsSalary not specified
- Full Time
- Mid-level (3 to 4 years), Senior (5 to 8 years)
RemoteCyber Security Architecture
GE HealthcareSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteProduct Security Product Owner
HumanaSalary not specified