Head of Enterprise Security Engineering - Hybrid SF

Socket.dev; San Francisco (CA); Hybrid; USD 230,000 - 350,000; Full time

Job summary

Strava is seeking a Senior Manager of Enterprise Security Engineering to own strategy and execution of the corporate security program. Reporting to the CISO, you will lead a lean, high-performing team securing Strava's internal environment while enabling secure growth.

This is a highly technical leadership role, defining long-term roadmaps and balancing in-house work with strategic partners to keep the business moving forward. The role is hybrid with on-site in San Francisco three days a week.

Qualifications

• 10+ years designing, building, and operating enterprise security programs in cloud-first environments.
• 3+ years leading security engineering teams with hands-on engineering involvement.
• Strong communication and stakeholder management to influence executives through risk-based decisions.

Responsibilities

• Own and execute the enterprise security roadmap across identity, endpoint, email, corporate network and SaaS security.
• Lead a small team of enterprise security engineers, fostering a culture of technical excellence, operational rigor and ownership.
• Stay hands-on by designing, building, and configuring security capabilities alongside your team when needed.
• Build an operating model that combines internal engineering with strategic partners, determining what should be owned in-house and holding vendors accountable for measurable security outcomes.
• Architect and evolve Strava's identity and access management platform, including SSO, MFA, privileged access, identity governance, lifecycle automation, and Zero Trust principles across cloud and SaaS environments.

Skills

Leadership

Cloud security

Team leadership

Stakeholder management

IAM architecture

Security architecture

Tools

Okta

Intune

Jamf

ZTNA

Sailpoint

GWS

Slack

GitHub

Job description

Strava is seeking a Senior Manager of Enterprise Security Engineering to own strategy and execution of the corporate security program. Reporting to the CISO, you will lead a lean, high-performing team securing Strava's internal environment while enabling secure growth.

This is a highly technical leadership role, defining long-term roadmaps and balancing in-house work with strategic partners to keep the business moving forward. The role is hybrid with on-site in San Francisco three days a week.