Strava
Senior Security Engineer II
$230K–$250K
Strava SF · Hybrid · Senior · Full-time · Posted Oct 15, 2026
About the job
Secures Strava’s applications and infrastructure by building proactive security practices, automated controls, and risk remediation processes across US and EU environments.
What you'll do
- Design secure architectures and development practices with engineering, infrastructure, and security teams.
- Build automated vulnerability detection, secure-configuration, CI/CD, and cloud-security workflows.
- Coordinate incident response, vulnerability triage, remediation, and validation.
What they ask for
- Hands-on application and infrastructure security experience, including code review, threat modeling, and cloud-native security.
- Experience designing or implementing automated security controls in CI/CD pipelines.
- Knowledge of securing containerized and distributed environments, including Kubernetes, IAM, and network segmentation.
- Ability to manage vulnerability programs from detection and prioritization through engineering remediation.
Nice to have
- AWS
- GHAS, Snyk, Semgrep, or Trivy
Pay
$230K – $250K USD base salary
Tools
AWS, GHAS, Snyk, Semgrep, Trivy, Kubernetes, IAM, CI/CD
AI focus
Embrace generative AI tools and apply them to daily work.
Model-written summary · the original posting is authoritative