Security Engineering Manager

About the company

• Strava's Cybersecurity team protects the trust of over 200 million athletes by securing the platform, data, and systems.

Responsibilities

• Own and execute the enterprise security roadmap across corporate identity, endpoint, email, corporate network and SaaS security.
• Lead a small team of enterprise security engineers.
• Stay hands-on designing, building, and configuring security capabilities.
• Build an operating model combining internal engineering with strategic partners.
• Architect and evolve the identity and access management platform (SSO, MFA, privileged access, identity governance, Zero Trust).
• Drive hardening and automation of endpoints, networking, email, collaboration platforms, SaaS applications.
• Develop strategies for enterprise AI security, data security, vulnerability and exposure management.
• Partner with IT, Engineering, Legal, People, Workplace and Detection & Response teams.
• Communicate priorities, risks, and outcomes to the CISO and senior leadership.

Requirements

• 10+ years designing, building, and operating Enterprise Security programs in cloud-first environments.
• 3+ years leading security engineering teams.
• Strong communication and stakeholder management skills.
• Deep expertise in MFA, SSO, OAuth, MDM, EDR, device compliance and fleet management across macOS and Windows.
• Experience with Okta, Intune, Jamf, ZTNA, Sailpoint, GWS, Slack, Github.
• Experience managing strategic security vendors and managed service providers.
• Bonus: DLP, CASB, SSPM, DSPM, AI governance, security automation.

Conditions

• Flexible hybrid model: three days per week on-site in the San Francisco office.