SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Strava is a global platform for active people with over 200 million athletes across 185+ countries. The Security team protects the platform, data, and trust of this massive community by detecting, investigating, and responding to evolving threats.
As Senior Manager of Detection & Response, you'll own and scale security monitoring, incident response, and post-incident improvement across both Strava's corporate environment and product platform. You'll report directly to the CISO and lead a small team of detection and response engineers while deciding how to extend capabilities through automation, AI, and strategic vendor partnerships.
Key responsibilities include:
- Lead incident response as senior escalation point and incident commander during active investigations
- Build and mature detection engineering across cloud, endpoint, and application layers, continuously improving detection quality and coverage
- Own the security logging and telemetry pipeline, ensuring data is collected, normalized, and actionable for detection
- Shape the operating model—deciding what to build in-house versus deliver through managed services and vendors
- Leverage threat intelligence to proactively improve detection and drive threat hunting
- Modernize the SOC with automation and AI to increase coverage and response speed
- Manage incident playbooks, on-call escalation paths, and run tabletop exercises
- Deliver executive-ready reporting on incident trends, coverage, and program maturity
- Build, manage, and coach a team of detection and response engineers
You bring deep technical credibility with a track record of building or scaling detection engineering or security operations programs. You have sound understanding of modern adversary tradecraft, experience turning threat intelligence into practical detection strategies, and a proven ability to extend lean teams through managed services and vendor partnerships. You're comfortable leading incident command for complex, multi-stakeholder security incidents and operating with ambiguity. You have familiarity with automation and AI/ML in security operations, plus excellent communication skills for both technical and executive audiences.
Strava is backed by Sequoia Capital, TCV, Madrone Partners, and Jackson Square Ventures. The role follows a flexible hybrid model with more than half your time on-site in San Francisco (three days per week).
