Director, Detection & Response — Incident & Threat Hunting

Strava; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Strava in San Francisco is seeking a Senior Manager, Detection & Response to own and scale security monitoring, incident response, and recovery for the product and corporate environment.

You'll lead a small team of engineers, drive detection engineering across cloud, endpoint, and application layers, and partner with Infrastructure, IT, and Engineering to bake security into our systems.

This role blends hands-on leadership with strategic planning in a fast-growing, hybrid-work setting.

Qualifications

• Proven track record in incident response and security operations.
• Experience building or scaling a detection engineering or security operations program.
• Strong understanding of modern adversary tradecraft and practical detection strategies.

Responsibilities

• Lead incident response and security operations, serving as escalation point and incident commander during active investigations.
• Build and mature detection engineering across cloud, endpoint, and application layers to improve coverage.
• Own the security logging and telemetry pipeline for data collection, normalization and usability in detection.
• Shape the operating model for the function, balancing in-house work with managed services and vendors.
• Leverage threat intelligence to proactively improve detection and response measures.
• Modernize the SOC with automation and AI to increase coverage and speed of response.
• Manage incident playbooks, on-call and escalation paths, and tabletop exercises.
• Deliver executive-ready reporting on incident trends, coverage, and program maturity.
• Build and coach a small team of detection and response engineers.

Skills

Incident response leadership

Detection engineering

Threat intelligence

Security operations

Automation/AI in security

Team leadership

Communication

Job description

Strava in San Francisco is seeking a Senior Manager, Detection & Response to own and scale security monitoring, incident response, and recovery for the product and corporate environment.

You'll lead a small team of engineers, drive detection engineering across cloud, endpoint, and application layers, and partner with Infrastructure, IT, and Engineering to bake security into our systems.

This role blends hands-on leadership with strategic planning in a fast-growing, hybrid-work setting.