SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Strava is a global fitness and activity-tracking platform with over 200 million athletes across 185+ countries. The Cybersecurity team protects this community by securing the platform, data, and systems that athletes depend on daily.
As Senior Manager of Enterprise Security Engineering, you will report directly to the CISO and own the strategy and execution of Strava's corporate security program. You'll lead a lean, high-performing engineering team responsible for securing Strava's internal environment while enabling secure growth across the organization.
Key responsibilities include:
- Own and execute the enterprise security roadmap covering corporate identity, endpoint, email, corporate network, and SaaS security
- Lead a small team of enterprise security engineers, fostering technical excellence and operational rigor
- Design, build, and configure security capabilities alongside your team
- Build an operating model combining internal engineering with strategic partners, determining what to own in-house
- Architect and evolve Strava's identity and access management platform (SSO, MFA, privileged access, Zero Trust)
- Secure the enterprise environment through endpoint hardening, network architecture, email security, and SaaS application security
- Develop strategies for enterprise AI security, data security, vulnerability management, and continuous hardening
- Partner with IT, Engineering, Legal, People, and Workplace teams to build secure-by-default experiences
- Communicate priorities, risks, and outcomes to the CISO and senior leadership
Required qualifications:
- 10+ years designing, building, and operating Enterprise Security programs in modern cloud-first environments
- 3+ years leading security engineering teams with experience coaching engineers while remaining technically engaged
- Strong communication and stakeholder management skills with ability to influence executives through risk-based decision making
- Deep expertise in enterprise security capabilities at scale: MFA, SSO, OAuth, MDM, EDR, device compliance, fleet management (macOS/Windows)
- Experience with tools: Okta, Intune, Jamf, ZTNA, Sailpoint, GWS, Slack, Github
- Experience designing enterprise security architectures balancing security with employee productivity and developer velocity
- Experience managing strategic security vendors and managed service providers
Bonus experience includes DLP, CASB, SSPM, DSPM, modern data security platforms, AI governance integration, and building self-service security automation.
Strava is backed by Sequoia Capital, TCV, Madrone Partners, and Jackson Square Ventures. The role operates on a flexible hybrid model with 3+ days per week on-site in San Francisco.
