Senior Manager, Detection Response

Socket.dev; San Francisco (CA); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid work model

On-site SF office

Competitive compensation

Job summary

Strava in San Francisco is seeking a Senior Manager, Detection & Response to own and scale security monitoring, incident response, and recovery for both product and corporate environments. You will lead a small team, partner across Infrastructure, Product Security, Enterprise Security, IT, and Engineering to embed detection into systems by design.

You’ll shape the operating model, balance in-house work with managed services, leverage threat intel, and modernize the SOC with automation and AI.

Qualifications

• Experience leading incident response for enterprise-scale environments.
• Track record building or scaling detection engineering or SOC programs.
• Strong collaboration with cross-functional teams including IT, product security, and engineering.
• Hands-on technical leader with ability to dig in without full facts.

Responsibilities

• Lead incident response and security operations for Strava's surface and corporate environment.
• Build and mature detection engineering across cloud, endpoint, and application layers.
• Own the security logging and telemetry pipeline for detection readiness.
• Shape operating model, balancing in-house work with managed services and vendors.
• Leverage threat intelligence to improve proactive detection and hunts.
• Modernize the SOC with automation and AI to speed response.
• Manage incident playbooks, on-call, escalation paths and tabletop exercises.
• Deliver executive-ready reporting on trends, coverage, and program maturity.
• Build, coach, and grow a small team of detection and response engineers.
• Apply adversary tradecraft knowledge to proactive detection and threat hunting.

Skills

Incident response

Detection engineering

Threat intelligence

Security operations

Team leadership

Executive communication

Job description

About Strava

Strava is the app for active people. With over 200 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today.

Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward.

About This Role

Strava's Security team protects the platform, the data, and the trust of more than 200 million athletes worldwide. As threats against consumer platforms grow more sophisticated, this team is responsible for detecting, investigating, and responding to them quickly and confidently.

We're looking for a Senior Manager, Detection & Response to own and scale this function, reporting to the CISO. You'll set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement covering both our corporate environment and the Strava product. You'll build and manage a small team of engineers, decide how to extend that team's reach through automation and strategic partners, and partner closely with Infrastructure, Product Security, Enterprise Security, IT, and Engineering to make sure detection and response capabilities are built into our systems by design. This is a role for a technically hands-on leader who's naturally curious and comfortable digging in without all the facts, in a high-growth environment.

We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office, three days per week.

What You'll Do

• Lead incident response and security operations, acting as the senior escalation point and incident commander during active investigations


• Build and mature detection engineering across cloud, endpoint, and application layers (Strava product surface), continuously raising detection quality and coverage


• Own the security logging and telemetry pipeline, ensuring the right data is collected, normalized, and usable for detection


• Shape the operating model for the function, deciding what we build in-house versus deliver through managed services and strategic vendors, and holding those partners accountable for measurable security outcomes


• Leverage outside threat intel to proactively improve detection


• Modernize the SOC with automation and AI to increase coverage and speed up response


• Manage incident playbooks, on-call and escalation paths, and run tabletop exercises


• Deliver clear, executive-ready reporting on incident trends, coverage, and program maturity


• Build, manage and coach a small team of detection and response engineers


• Apply threat intelligence and a working knowledge of adversary tradecraft to drive proactive detection and threat hunting

What You'll Bring to the Team

• A highly collaborative, low-ego approach to working across security, engineering, and other partner teams


• Deep technical credibility and operational instincts, with a track record of building or scaling a detection engineering or security operations program


• Sound understanding of modern adversary tradecraft, with experience turning threat intelligence into practical detection strategies, proactive hunts, and response actions


• Experience extending a lean team's coverage through managed services or security vendors, including selecting partners and holding them accountable to measurable outcomes


• Track record leading incident command for security incidents involving multiple stakeholders, from working teams to executive leadership


• Excellent problem-solving instincts and comfort operating with ambiguity, including the judgment to think beyond established playbooks when a situation calls for it, and a steady, structured presence during active incidents


• Familiarity applying automation or AI/ML techniques to security operations


• Excellent written and verbal communication, including reporting to executive audiences

Why Join Us?

Movement brings us together. At Strava, we’re building the world’s largest community of active people, helping them stay motivated and achieve their goals.

Our global team is passionate about making movement fun, meaningful, and accessible to everyone. Whether you’re shaping the technology, growing our community, or driving innovation, your work at Strava makes an impact.

When you join Strava, you’re not just joining a company—you’re joining a movement. If you’re ready to bring your energy, ideas, and drive, let’s build something incredible together.

Strava builds software that makes the best part of our athletes’ days even better. Just as we’re deeply committed to unlocking their potential, we’re dedicated to providing a world-class, inclusive workplace where our employees can grow and thrive, too. We’re backed by Sequoia Capital, TCV, Madrone Partners and Jackson Square Ventures, and we’re expanding in order to exceed the needs of our growing community of global athletes. Our culture reflects our community. We are continuously striving to hire and engage teammates from all backgrounds, experiences and perspectives because we know we are a stronger team together.

Strava is an equal opportunity employer. In keeping with the values of Strava, we make all employment decisions including hiring, evaluation, termination, promotional and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

California Consumer Protection Act Applicant Notice