Senior Security Engineer II - Secure Cloud & CI/CD Lead

Strava; United States; Hybrid; USD 120,000 - 190,000; Full time

Job summary

Strava is seeking a Security Engineer to protect our platform used by millions of athletes, ensuring secure and compliant applications across regions.

You will collaborate with Engineering and Infrastructure to design secure architectures and embed automated checks into CI/CD and cloud configurations. The role emphasizes threat modeling, vulnerability management, and cross‑team partnership to strengthen security postures.

Qualifications

• Hands-on experience in application and infrastructure security.
• Securing cloud-native environments (AWS preferred).
• Automated security controls in CI/CD pipelines.
• Secure containerized/distributed environments (Kubernetes, IAM).
• End-to-end vulnerability management and remediation.

Responsibilities

• Protect a platform used by millions by ensuring secure, resilient, compliant apps and infra.
• Collaborate with engineering, infrastructure, and security teams on secure architectures.
• Shape risk management for US and EU with fast, accurate remediation.
• Build automated workflows to identify vulnerabilities and strengthen CI/CD security.

Skills

Application security

Infrastructure security

Threat modeling

CI/CD security

Cloud security (AWS)

Security automation (GHAS, Snyk, SemG…

Kubernetes security

IAM security

Vulnerability management

Incident response

Cross-team collaboration

Tools

GHAS

Snyk

Semgrep

Trivy

Kubernetes

Job description

Strava is seeking a Security Engineer to protect our platform used by millions of athletes, ensuring secure and compliant applications across regions.

You will collaborate with Engineering and Infrastructure to design secure architectures and embed automated checks into CI/CD and cloud configurations. The role emphasizes threat modeling, vulnerability management, and cross‑team partnership to strengthen security postures.