Senior Security Engineer II - Secure Cloud & CI/CD Champion

Strava, Inc.; San Francisco (CA); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Strava, Inc. is seeking a security-focused engineer to protect its platform and data. The role collaborates with engineering, infrastructure, and security teams to design secure architectures and embed secure-by-design practices across the SDLC.

You will shape risk management for the US and EU, accelerate vulnerability remediation, and build automated security workflows for CI/CD and cloud controls in a hybrid SF setting.

Qualifications

• Experience in application and infrastructure security, including threat modeling and secure architectures.
• Ability to implement automated security controls in CI/CD pipelines.
• Familiar with cloud-native environments, ideally AWS, and container security.
• Experience coordinating vulnerability management and incident response.
• Collaborative and pragmatic with strong communication to influence engineering teams.

Responsibilities

• Protect Strava’s platform with secure, resilient, and compliant applications and infra.
• Design secure architectures and embedding secure development practices with cross-functional teams.
• Shape risk management for US and EU, ensuring fast remediation and consistent controls.
• Build automated security workflows to identify vulnerabilities and strengthen CI/CD and cloud security.

Skills

Threat modeling

Security architecture

Secure-by-design practices

CI/CD security

Incident response

Collaboration with engineering

Generative AI usage

Tools

GHAS

Snyk

Semgrep

Trivy

Kubernetes

IAM

AWS

Job description

Strava, Inc. is seeking a security-focused engineer to protect its platform and data. The role collaborates with engineering, infrastructure, and security teams to design secure architectures and embed secure-by-design practices across the SDLC.

You will shape risk management for the US and EU, accelerate vulnerability remediation, and build automated security workflows for CI/CD and cloud controls in a hybrid SF setting.