Senior Security Engineer

Join Strava, the leading social network for athletes. As a Senior Security Engineer, you will be part of the Strava Security Team, responsible for protecting the company's people, business, and data through proactive security practices. You will work across all security domains, including product security, vulnerability management, incident response, infrastructure, network, and enterprise security. Your role will involve designing and implementing secure architectures, building automated workflows to identify vulnerabilities, and coordinating incident response and vulnerability triage.

• Collaborer avec les équipes d'ingénierie, d'infrastructure et de sécurité pour concevoir et mettre en œuvre des architectures sécurisées et des pratiques de développement.
• Conduire des pratiques de sécurité dès la conception au sein des équipes d'ingénierie, y compris la modélisation des menaces, les examens d'architecture et la gestion des vulnérabilités.
• Gérer les programmes de gestion des vulnérabilités de bout en bout, de la détection et de la priorisation à la remédiation par l'ingénierie.

• Are collaborative and pragmatic — able to influence engineering teams through partnership, technical credibility, and clear communication
• Understand how to secure containerized and distributed environments, including Kubernetes, IAM, and network segmentation
• Are comfortable managing vulnerability management programs end-to-end, from detection and prioritization through engineering remediation
• Bring hands-on experience in application and infrastructure security, including code review, threat modeling, and securing cloud-native environments (AWS preferred)
• Have designed or implemented automated security controls in CI/CD pipelines using tools like GHAS, Snyk, Semgrep, Trivy, etc