270K–290K USD / year
Staff Enterprise Security Engineer
DevOpsHybrid — San Francisco, California, United States
Published on 2026-10-20
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Set technical direction for Strava’s Enterprise Security program and lead improvements across corporate devices, identity, browsers, Google Workspace, and SaaS applications. The role balances risk reduction with employee productivity and developer velocity.
About the company
Strava is a platform designed for athletes and fitness enthusiasts to track their workouts, connect with others, and analyze their performance. The company offers a range of tools and features to enhance the experience of running, cycling, and other activities.
The team
Cybersecurity team, partnering with IAM, IT, Engineering, and Detection & Response.
Stack
macOSWindowsLinuxJamfIntuneGoogle WorkspaceOktaChrome Enterprise
What you'll do
- Define Enterprise Security strategy, target-state controls, and a risk-prioritized roadmap.
- Harden endpoints, device management, managed browsers, Google Workspace, and critical SaaS applications.
- Establish OAuth and third-party application governance.
- Partner with IAM on SSO, MFA, device trust, conditional access, privileged access, and lifecycle controls.
- Build scripts, integrations, and automation to make controls repeatable and measurable.
- Advise stakeholders, document architecture decisions and risks, mentor engineers, and support corporate security incidents.
What we're looking for
- Substantial enterprise security experience, independently owning initiatives from assessment through operationalization.
- Hands-on experience securing macOS and Windows endpoints with EDR, MDM, device compliance, and fleet-management tools.
- Experience hardening Google Workspace and SaaS, including OAuth application governance.
- Strong understanding of identity and access architecture, including SSO, MFA, conditional access, and Zero Trust.
- Ability to design pragmatic security controls for engineering environments, including Linux and developer workflows.
- Scripting and automation experience in Python or a similar language, including API integrations.
- Strong architectural judgment and communication skills.
Nice to have
- Experience with SSPM, CASB, DLP, DSPM, or enterprise AI and productivity platform security.
Benefits
- Equity