Remote Staff Enterprise Security Engineer

VulnU; San Francisco (CA); Hybrid; USD 270,000 - 290,000; Full time

Job summary

Strava is hiring a Staff Enterprise Security Engineer to set the technical direction for Enterprise Security and drive its execution. You will assess the current environment, define pragmatic target-state controls, and lead improvements across endpoints, device management, and identity integrations.

You will partner with IAM, IT, and Engineering to balance security with productivity, while managing a risk-based roadmap and on-call rotation.

Qualifications

• Extensive enterprise security engineering experience across corporate environments.
• Hands-on with macOS/Windows endpoints, EDR, MDM, and fleet-management tooling.
• Deep knowledge of Google Workspace security and SaaS admin controls.
• Strong grasp of SSO, MFA, device trust, conditional access, and Zero Trust.
• Proficiency in Python or similar for scripting and API integration.

Responsibilities

• Own the technical strategy for Enterprise Security and maintain a risk-prioritized roadmap.
• Harden endpoints and device-management architecture; enforce baseline security.
• Improve browser controls, Google Workspace integration, and SaaS governance.
• Lead OAuth and third-party application governance with ongoing approvals.
• Build scripts and automation to make controls repeatable and measurable.
• Advise IT/Engineering on security tradeoffs and document decisions.

Skills

Enterprise Security

macOS security

Windows security

EDR

MDM

Google Workspace

OAuth governance

SSO

MFA

conditional access

Zero Trust

Python scripting

APIs integration

SSPM/CASB/DLP/DSPM

Education

Bachelor's degree in a relevant field

Tools

Jamf

Intune

Okta

Job description

Strava is hiring a Staff Enterprise Security Engineer to set the technical direction for Enterprise Security and drive its execution. You will assess the current environment, define pragmatic target-state controls, and lead improvements across endpoints, device management, and identity integrations.

You will partner with IAM, IT, and Engineering to balance security with productivity, while managing a risk-based roadmap and on-call rotation.