Senior Security Engineer

. Protect Strava’s applications and infrastructure for millions of athletes .

Posted 10/15/2026full-timeSan Francisco • California • United StatesSenior💰 $230,000 - $250,000 per yearWebsite

Tools & technologies

AWSCloudKubernetes

Key responsibilities & impact

Protect Strava’s applications and infrastructure for millions of athletes
Ensure systems are secure, resilient, and compliant across regions
Design and implement secure architectures and development practices with engineering, infrastructure, and security teams
Shape application and infrastructure risk management in the US and EU
Build automated workflows to identify vulnerabilities early and enforce secure configurations
Strengthen CI/CD and cloud security controls
Embed automated security checks into CI/CD pipelines and infrastructure-as-code deployments
Coordinate incident response, vulnerability triage, and remediation validation with the global security team

What you’ll need

Hands-on experience in application and infrastructure security
Experience with code review and threat modeling
Experience securing cloud-native environments; AWS preferred
Experience designing or implementing automated security controls in CI/CD pipelines
Experience with GHAS, Snyk, Semgrep, Trivy, or similar tools
Knowledge of securing containerized and distributed environments
Knowledge of Kubernetes, IAM, and network segmentation
Experience managing vulnerability management programs end-to-end
Ability to drive secure-by-design practices, including threat modeling, architecture reviews, and vulnerability management
Ability to use generative AI tools in daily work
Collaborative and pragmatic approach with clear communication
Ability to work onsite in the San Francisco office three days per week

Comp & perks