{"id":2965173,"url":"https://alion.io/job/strava-staff-enterprise-security-engineer","title":"Staff Enterprise Security Engineer","company":{"id":3883,"name":"Strava","domain":"strava.com","url":"https://alion.io/company/strava","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":270000,"max":290000,"currency":"USD","period":"year","gross":null,"usd_annual":290000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-20T20:00:42Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-23T00:36:36Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About Strava\nStrava is the app for active people. With over 200 million athletes in more than 185 countries, it’s more than tracking workouts-it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today.\nOur mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward.\nAbout This Role\nStrava's Cybersecurity team protects the trust of more than 180 million athletes by securing our platform, our data, and the systems our community depends on every day. Enterprise Security covers our corporate environment: endpoints, identity, browsers, Google Workspace, and the SaaS tools our teams rely on.\nAs a Staff Enterprise Security Engineer, you will set the technical direction for Enterprise Security and drive its execution. You will assess our current environment, define pragmatic target-state controls, and lead improvements across endpoints, device management, browsers, Google Workspace, critical SaaS, and corporate identity integrations. You will partner closely with IAM, IT, Engineering, and Detection & Response, and make architecture decisions that balance security, employee productivity, and developer velocity.\n We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office, three days per week.\nWhat You'll Do\nOwn the technical strategy for Enterprise Security: assess the current environment, define target-state controls, and maintain a risk-prioritized roadmap and backlog.\n\nHarden macOS and Windows endpoints across EDR, MDM, encryption, local administrator controls, host firewall, patching, and device compliance baselines, and define a practical security model for Linux in an engineering-heavy environment.\n\nImprove device-management architecture and managed-browser controls, including enrollment, configuration profiles, compliance policies, extension governance, and authentication and session controls, with tight integration into identity and access policy.\n\nHarden Google Workspace and critical SaaS applications (authentication, admin privileges, email, Drive sharing, context-aware access), establish a repeatable hardening approach, and drive remediation of the highest-risk gaps.\n\nLead OAuth and third-party application governance: review existing grants, remediate risky scopes and integrations, and set up an ongoing approval and review process.\n\nPartner with IAM to design and implement SSO, MFA, device trust, conditional access, privileged access, and lifecycle controls.\n\nBuild scripts, integrations, and automation that make controls repeatable and measurable, and reduce manual security operations.\n\nAdvise IT, Engineering, and business partners on security design and tradeoffs, turning ambiguous problems into concrete plans, and document architecture decisions, exceptions, and residual risk.\n\nPartner with Detection & Response on corporate security incidents, mentor other engineers, and take part in a business-hours on-call rotation with clear handoffs across time zones.\n\nWhat You'll Bring to the Team\nSubstantial experience in Enterprise Security, Security Engineering, or closely related corporate security roles, including independently owning initiatives from assessment and architecture through implementation and operationalization.\n\nDeep hands-on experience securing macOS and Windows endpoints with modern EDR, MDM, device-compliance, and fleet-management tools (for example Jamf or Intune; equivalent technologies are fine).\n\nHands-on experience hardening Google Workspace and corporate SaaS environments, including admin controls, sharing, email, third-party integrations, and OAuth application governance.\n\nSolid understanding of enterprise identity and access architecture, including SSO, MFA, device trust, conditional access, privileged access, identity lifecycle, and Zero Trust principles, with tools such as Okta, Chrome Enterprise, and ZTNA platforms.\n\nExperience designing pragmatic controls for engineering-heavy environments (Linux systems, developer workflows, non-standard endpoints), and the ability to script and automate in Python or a similar language and integrate systems through APIs.\n\nSound architectural judgment and clear written and verbal communication, including advising senior technical and business stakeholders and driving work across multiple teams in a distributed company.\n\nExperience with SaaS Security Posture Management (SSPM), CASB, DLP, DSPM, or securing enterprise AI and productivity platforms is a plus.\n\nFor information on benefits, please click here.\nWhy Join Us?\nMovement brings us together. At Strava, we’re building the world’s largest community of active people, helping them stay motivated and achieve their goals.\nOur global team is passionate about making movement fun, meaningful, and accessible to everyone. Whether you’re shaping the technology, growing our community, or driving innovation, your work at Strava makes an impact.\nWhen you join Strava, you’re not just joining a company-you’re joining a movement. If you’re ready to bring your energy, ideas, and drive, let’s build something incredible together.\nStrava builds software that makes the best part of our athletes’ days even better. Just as we’re deeply committed to unlocking their potential, we’re dedicated to providing a world-class, inclusive workplace where our employees can grow and thrive, too. We’re backed by Sequoia Capital, TCV, Madrone Partners and Jackson Square Ventures, and we’re expanding in order to exceed the needs of our growing community of global athletes. Our culture reflects our community. We are continuously striving to hire and engage teammates from all backgrounds, experiences and perspectives because we know we are a stronger team together.\nStrava is an equal opportunity employer. In keeping with the values of Strava, we make all employment decisions including hiring, evaluation, termination, promotional and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight.\nWe will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.\nCalifornia Consumer Protection Act Applicant Notice","description_format":"text","description_chars":6786,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Fitness","Social Networks"],"lifecycle":[{"event":"open","at":"2026-10-20T23:55:22Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 18 · green card filings: 1","filings_12m":18,"filings_prev_12m":11,"green_card_filings_12m":1,"median_offered_wage_usd":209342,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":65,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":290000,"is_top_pay":true},"html_url":"https://alion.io/job/strava-staff-enterprise-security-engineer","json_url":"https://alion.io/job/strava-staff-enterprise-security-engineer.json","meta":{"generated_at":"2026-10-23T04:33:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7450,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3883},"rest":"https://alion.io/mcp/rest/get_company?id=3883"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstrava-staff-enterprise-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstrava-staff-enterprise-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstrava-staff-enterprise-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/strava-staff-enterprise-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstrava-staff-enterprise-security-engineer"}]}