# Staff Enterprise Security Engineer at Strava

Strava is hiring a Staff Enterprise Security Engineer. It pays $270k-$290k a year and Level rates it Little AI ●○○○; you can [apply on Strava](https://jobsbylevel.com/go/a304c315-7d7a-46a2-94a1-bf8ae439fda5?utm_medium=ai-agent).

AI Level 1, AI centrality 37 out of 100. Remote (Strava SF).

## Details

- Company: [Strava](https://jobsbylevel.com/companies/strava)
- AI level: AI Level 1 (score 37 out of 100)
- Location: Remote (Strava SF)
- Salary: $270k-$290k
- Posted: October 20, 2026
- Apply: https://jobsbylevel.com/go/a304c315-7d7a-46a2-94a1-bf8ae439fda5?utm_medium=ai-agent

## Description

About Strava Strava is the app for active people. With over 200 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today. Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward. About This Role Strava's Cybersecurity team protects the trust of more than 180 million athletes by securing our platform, our data, and the systems our community depends on every day. Enterprise Security covers our corporate environment: endpoints, identity, browsers, Google Workspace, and the SaaS tools our teams rely on. As a Staff Enterprise Security Engineer, you will set the technical direction for Enterprise Security and drive its execution. You will assess our current environment, define pragmatic target-state controls, and lead improvements across endpoints, device management, browsers, Google Workspace, critical SaaS, and corporate identity integrations. You will partner closely with IAM, IT, Engineering, and Detection & Response, and make architecture decisions that balance security, employee productivity, and developer velocity. We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office, three days per week. What You'll Do Own the technical strategy for Enterprise Security: assess the current environment, define target-state controls, and maintain a risk-prioritized roadmap and backlog. Harden macOS and Windows endpoints across EDR, MDM, encryption, local administrator controls, host firewall, patching, and device compliance baselines, and define a practical security model for Linux in an engineering-heavy environment. Improve device-management architecture and managed-browser controls, including enrollment, configuration profiles, compliance policies, extension governance, and authentication and session controls, with tight integration into identity and access policy. Harden Google Workspace and critical SaaS applications (authentication, admin privileges, email, Drive sharing, context-aware access), establish a repeatable hardening approach, and drive remediation of the highest-risk gaps. Lead OAuth and third-party application governance: review existing grants, remediate risky scopes and integrations, and set up an ongoing approval and review process. Partner with IAM to design and implement SSO, MFA, device trust, conditional access, privileged access, and lifecycle controls. Build scripts, integrations, and automation that make controls repeatable and measurable, and reduce manual security operations. Advise IT, Engineering, and business partners on security design and tradeoffs, turning ambiguous problems into concrete plans, and document architecture decisions, exceptions, and residual risk. Partner with Detection & Response on corporate security incidents, mentor other engineers, and take part in a business-hours on-call rotation with clear handoffs across time zones. What You'll Bring to the Team Substantial experience in Enterprise Security, Security Engineering, or closely related corporate security roles, including independently owning initiatives from assessment and architecture through implementation and operationalization. Deep hands-on experience securing macOS and Windows endpoints with modern EDR, MDM, device-compliance, and fleet-management tools (for example Jamf or Intune; equivalent technologies are fine). Hands-on experience hardening Google Workspace and corporate SaaS environments, including admin controls, sharing, email, third-party integrations, and OAuth application governance. Solid understanding of enterprise identity and access architecture, including SSO, MFA, device trust, conditional access,

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/staff-enterprise-security-engineer-at-strava-630a8a

Source: https://jobsbylevel.com/jobs/staff-enterprise-security-engineer-at-strava-630a8a

## Cite this page

Level. https://jobsbylevel.com/jobs/staff-enterprise-security-engineer-at-strava-630a8a.

Get job alerts: https://jobsbylevel.com/newsletter