Strava

Lead engineering team managing privacy and login platform with hands-on development and cross-platform consistency. | Requires 1-2 years management experience and 5+ years fullstack engineering with ability to quickly learn platform security and privacy controls. | About Strava Strava is the app for active people. With over 200 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today. Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward. About This Role Strava is seeking an Engineering Manager for the Privacy and Login team — operating 60/40 as hands-on engineer and technical leader, with a consumer product focus. You'll own how athletes sign up, log in, and understand and manage their privacy on Strava, from account security to giving people clear visibility and control over their data across iOS, Android, and web. This is a platform engineering role, not a security or IAM specialist position. No prior identity or authentication experience is required. We're looking for strong product engineering fundamentals (fullstack skills prioritized) and the ability to learn quickly in a high-trust domain. We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office - three days per week. What You'll Do: • Give athletes clear, intuitive ways to understand and manage their privacy settings, and make sure that information is easy to find and act on in the product • Own the technical roadmap for account sign-up, login, password management, and account recovery • Build reliable, predictable login experiences so athletes can get into their accounts quickly and securely, across a unified foundation spanning Strava Group's app portfolio • Partner with Product, Security, Trust & Safety, and Legal to ensure compliance and platform integrity • Drive consistency across iOS, Android, and web login, privacy, and account experiences • Monitor and improve login success rates, recovery flows, and how well users engage with privacy controls • Lead with strong technical judgment, balancing hands-on contribution with clear technical leadership • Establish best practices, operational excellence, and a culture of inclusion and mentorship What You'll Bring to the Team: • 1-2 years of management/people leadership experience — we welcome early-career managers who are ready to grow into the role • 5+ years experience of strong fullstack or product engineering background — comfort across backend systems and consumer-facing UI is welcome, with the ability to quickly ramp up on systems that keep user accounts secure and easy to access • Comfort learning on the job how to build predictable, secure login experiences and clear, user-friendly privacy controls — no prior identity-specific experience required • Ability to lead a team through ambiguous, high-stakes technical problems and drive consistency across platforms • A product mindset: ability to balance user experience with robust data protection and abuse prevention • A holistic view of platform engineering as a foundation for trust, safety, privacy, and growth For information on benefits, please click here. Why Join Us? Movement brings us together. At Strava, we’re building the world’s largest community of active people, helping them stay motivated and achieve their goals. Our global team is passionate about making movement fun, meaningful, and accessible to everyone. Whether you’re shaping the technology, growing our community, or driving innovation, your work at Strava makes an impact. When you join Strava, you’re not just joining a company—you’re joining a movement. If you’re ready to bring your energy, ideas, and drive, let’s build something incredible together. Strava builds software that makes the best part of our athletes’ days even better. Just as we’re deeply committed to unlocking their potential, we’re dedicated to providing a world-class, inclusive workplace where our employees can grow and thrive, too. We’re backed by Sequoia Capital, TCV, Madrone Partners and Jackson Square Ventures, and we’re expanding in order to exceed the needs of our growing community of global athletes. Our culture reflects our community. We are continuously striving to hire and engage teammates from all backgrounds, experiences and perspectives because we know we are a stronger team together. Strava is an equal opportunity employer. In keeping with the values of Strava, we make all employment decisions including hiring, evaluation, termination, promotional and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. California Consumer Protection Act Applicant Notice

Lead enterprise security strategy and execution, manage teams and vendors, and architect identity and access management systems. | 10+ years enterprise security experience in cloud environments with 3+ years leadership and deep technical expertise in identity management, endpoint security, and security architecture. | About Strava Strava is the app for active people. With over 200 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today. Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward. About This Role Strava's Cybersecurity team protects the trust of over 200 million athletes by securing our platform, our data, and the systems our community depends on every day. Enterprise Security Engineering owns the engineering, architecture, and operation of the systems that secure Strava's workforce and corporate environment across a globally distributed company. As the Senior Manager of Enterprise Security Engineering, you will own the strategy and execution of Strava's corporate security program. Reporting directly to the CISO, you will lead a lean, high-performing engineering team responsible for securing Strava's internal environment while partnering across the business to enable secure growth. This is a highly technical leadership role. You'll define the long-term roadmap and operating model for the function, including which capabilities Strava owns internally versus delivers through strategic partners, while balancing strategic leadership with execution and making risk-based decisions that strengthen security without slowing the business down. We follow a flexible hybrid model that translates to spending more than half of your time on-site in our San Francisco office, three days per week. What You'll Do Own and execute the enterprise security roadmap across corporate identity, endpoint, email, corporate network and SaaS security. Lead a small team of enterprise security engineers, fostering a culture of technical excellence, operational rigor and ownership. Stay hands-on by designing, building, and configuring security capabilities alongside your team when needed. Build an operating model that combines internal engineering with strategic partners, determining what should be owned in-house and holding vendors accountable for measurable security outcomes. Architect and evolve Strava's identity and access management platform, including SSO, MFA, privileged access, identity governance, lifecycle automation, and Zero Trust principles across cloud and SaaS environments. Secure Strava's enterprise environment by driving the architecture, hardening, and automation of endpoints, enterprise networking, email, collaboration platforms, SaaS applications, and third-party integrations. Develop and execute strategies for enterprise AI security, data security, vulnerability and exposure management, and continuous hardening of the corporate environment. Partner closely with IT, Engineering, Legal, People, Workplace to build secure-by-default experiences. Partner with the Detection & Response team during corporate-related security incidents. Communicate priorities, risks, and measurable outcomes to the CISO and senior leadership. What You'll Bring to the Team Leadership 10+ years of experience designing, building, and operating Enterprise Security programs in modern cloud-first environments. 3+ years leading security engineering teams, with experience coaching engineers while remaining technically engaged. Strong communication and stakeholder management skills, with the ability to influence cross-functional partners and executives through clear, risk-based decision making. Deep expertise in operating enterprise security capabilities at scale, including MFA, SSO,OAuth, MDM, EDR, device compliance and fleet management across macOS and Windows. Experience working with tooling such as Okta, Intune, Jamf, ZTNA, Sailpoint, GWS, Slack, Github. Experience designing enterprise security architectures that balance strong security with employee productivity and developer velocity. Experience managing strategic security vendors and managed service providers. Bonus Points Experience with DLP, CASB, SSPM, DSPM, or modern data security platforms. Experience integrating AI governance and security into enterprise productivity platforms. Experience building self-service security capabilities and security automation for internal users. Why Join Us? Movement brings us together. At Strava, we’re building the world’s largest community of active people, helping them stay motivated and achieve their goals. Our global team is passionate about making movement fun, meaningful, and accessible to everyone. Whether you’re shaping the technology, growing our community, or driving innovation, your work at Strava makes an impact. When you join Strava, you’re not just joining a company—you’re joining a movement. If you’re ready to bring your energy, ideas, and drive, let’s build something incredible together. Strava builds software that makes the best part of our athletes’ days even better. Just as we’re deeply committed to unlocking their potential, we’re dedicated to providing a world-class, inclusive workplace where our employees can grow and thrive, too. We’re backed by Sequoia Capital, TCV, Madrone Partners and Jackson Square Ventures, and we’re expanding in order to exceed the needs of our growing community of global athletes. Our culture reflects our community. We are continuously striving to hire and engage teammates from all backgrounds, experiences and perspectives because we know we are a stronger team together. Strava is an equal opportunity employer. In keeping with the values of Strava, we make all employment decisions including hiring, evaluation, termination, promotional and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. California Consumer Protection Act Applicant Notice

Lead security governance, strategy, and risk management programs with executive reporting and team management. | 8-12 years in cyber risk or technical security assurance with a bachelor's degree and technical fluency in threat modeling and AI automation. | About Strava Strava is the app for active people. With over 195 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today. Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward. About This Role Strava's Cybersecurity team protects the trust of a global community of athletes who rely on our platform every day. As the team scales its security program, we're rethinking how we assess and act on security risk: moving away from static, point-in-time risk registers and toward a living, data-driven view of where our real exposure lies. This is a role with a 70/30 split between hands-on execution and people management, reporting directly to the CISO. You'll build this function largely from scratch, standing up a repeatable process that turns various risk signals into a single, prioritized view that executive stakeholders can act on. You'll partner closely with cross-functional stakeholders across the business. We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office, three days per week. What You'll Do Own and advance Strava's security governance, strategy and risk management programs, leading a small team to help execute them Build a repeatable process that turns risk signals (threat models, bugs, vulnerabilities, incidents, vendor assessments) into one prioritized risk view with defined risk acceptance thresholds and escalation paths Own the AI and third-party risk management process — delivering risk insights that matter, not rubber-stamping compliance Establish a security steering committee with relevant stakeholders to ensure alignment on risk tolerance and prioritization Establish a multi-year, actionable security strategy, roadmap and investment priorities Deliver regular, executive- and board-ready risk reporting Partner across Engineering, Trust & Safety, Legal, AI Enablement, and other business functions, representing security in cross-functional planning and risk reviews Identify and implement opportunities to use AI and automation to improve efficiency of risk workflows Continuously evolve the risk methodology as new data sources, attack patterns, and business priorities emerge What You'll Bring to the Team Bachelor's degree in Engineering, Cybersecurity or related field 8-12 years of experience in security, cyber risk, technical security assurance or related technical risk roles Security certifications e.g. CISSP, CISM, or other relevant certifications Demonstrated success of standing up and managing security risk programs, treatment decisions and cross-functional execution end to end Strong understanding of security controls and how to work with engineering on implementation details Demonstrated track record translating technical security or threat findings into clear risk narratives Hands-on technical fluency: you've personally read and interpreted threat models, vulnerability findings, or incident data, not just relayed summaries of them Demonstrated experience using AI or automation tools to directly improve technical security or risk workflows (e.g., automating vulnerability triage, control testing, or risk scoring) Experience handling ambiguity, driving accountability and working across multiple stakeholders Excellent written and verbal communication skills, including ability to prepare and present risk reports to technical teams, senior leadership and board level executives Experience managing and developing teams Experience scaling GRC processes in a high-growth or consumer tech company is a plus Third-party or vendor risk management experience is a plus Quantitative risk methodology experience (e.g., FAIR) is a plus Why Join Us? Movement brings us together. At Strava, we’re building the world’s largest community of active people, helping them stay motivated and achieve their goals. Our global team is passionate about making movement fun, meaningful, and accessible to everyone. Whether you’re shaping the technology, growing our community, or driving innovation, your work at Strava makes an impact. When you join Strava, you’re not just joining a company—you’re joining a movement. If you’re ready to bring your energy, ideas, and drive, let’s build something incredible together. Strava builds software that makes the best part of our athletes’ days even better. Just as we’re deeply committed to unlocking their potential, we’re dedicated to providing a world-class, inclusive workplace where our employees can grow and thrive, too. We’re backed by Sequoia Capital, TCV, Madrone Partners and Jackson Square Ventures, and we’re expanding in order to exceed the needs of our growing community of global athletes. Our culture reflects our community. We are continuously striving to hire and engage teammates from all backgrounds, experiences and perspectives because we know we are a stronger team together. Strava is an equal opportunity employer. In keeping with the values of Strava, we make all employment decisions including hiring, evaluation, termination, promotional and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. California Consumer Protection Act Applicant Notice

Design and maintain backend services and data pipelines for activity data ingestion and processing. | 4+ years backend development experience with proficiency in Ruby, Scala, Go, or Java and distributed systems expertise. | About Strava Strava is the app for active people. With over 195 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today. Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward. About This Role Strava is hiring a Senior Engineer to join the Activities Platform team within Core Services. This team is responsible for the underlying services that power activity uploads, data processing, media, and activity storage; they own the foundational data layer that nearly every feature at Strava is built on. The team partners closely with product development teams, enabling and discovering the capabilities that will be on the roadmap: either immediately or long into the future. We apply a product-forward mindset to complicated platform and infrastructure work. Together we create the most reliable and performant ways for athletes to interact with their data — then inform what comes next. We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office — three days per week. What You’ll Do: Own and evolve the systems that power activity data at Strava — from upload ingestion through processing, storage, and serving Design and build backend services that handle millions of activity uploads and the data pipelines that flow from them Operate and improve critical production infrastructure, including participation in a 24/7 on-call rotation Partner with product teams across Strava to scope and deliver platform capabilities that unblock their roadmaps Contribute to technical design reviews, write and review design docs, and participate in shaping the team's technical direction Split your time roughly 50/50 between proactive platform investment and direct product-team support, adapting as priorities shift What You’ll Bring to the Team: You have 4+ years of professional software development experience or equivalent wisdom A track record of writing software that runs well in production. You think about monitoring, rollout strategy, and operational health as part of your development process, not an afterthought Solid backend/server engineering experience: you've built and shipped features or services in a production environment Experience with distributed systems and the trade-offs involved in scaling them Hands-on experience with data stores such as SQL or column stores. You understand what to use for data storage and why Proficiency in at least one of Strava's backend languages (Ruby, Scala, Go, Java) with comfort picking up others. Experience with distributed systems technologies like Kafka, Kubernetes, Docker, and cloud infrastructure (AWS). Ability to break down well-scoped problems, deliver projects from design through completion, and communicate clearly with engineers and cross-functional partners For information on benefits, please click here. Why Join Us? Movement brings us together. At Strava, we’re building the world’s largest community of active people, helping them stay motivated and achieve their goals. Our global team is passionate about making movement fun, meaningful, and accessible to everyone. Whether you’re shaping the technology, growing our community, or driving innovation, your work at Strava makes an impact. When you join Strava, you’re not just joining a company—you’re joining a movement. If you’re ready to bring your energy, ideas, and drive, let’s build something incredible together. Strava builds software that makes the best part of our athletes’ days even better. Just as we’re deeply committed to unlocking their potential, we’re dedicated to providing a world-class, inclusive workplace where our employees can grow and thrive, too. We’re backed by Sequoia Capital, TCV, Madrone Partners and Jackson Square Ventures, and we’re expanding in order to exceed the needs of our growing community of global athletes. Our culture reflects our community. We are continuously striving to hire and engage teammates from all backgrounds, experiences and perspectives because we know we are a stronger team together. Strava is an equal opportunity employer. In keeping with the values of Strava, we make all employment decisions including hiring, evaluation, termination, promotional and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. California Consumer Protection Act Applicant Notice