Senior Vulnerability Management Engineer, Strava
$166-196k
3 days a week in office (Strava, CA)
Social network for tracking run and cycle routes
Be an early applicant
Social network for tracking run and cycle routes
501-1000 employees
Be an early applicant
$166-196k
3 days a week in office (Strava, CA)
501-1000 employees
Company mission
To create the most committed, close, and engaged athlete community on the internet.
Role
Who you are
- Be highly self-motivated and detail-oriented, with a bias for action and strong ownership of outcomes
- Experience in vulnerability management, patch engineering, or endpoint hardening at scale in enterprise environments
- Know how to evaluate and act on vulnerability data using context, threat intelligence, and business impact—not just CVSS
- Have worked with tools like Tenable, AWS Inspector, CrowdStrike Spotlight, or similar platforms for risk identification and remediation
- Have collaborated with IT, SRE, and Engineering to implement automated patching, enforce baselines, or manage exceptions responsibly
- Are comfortable scripting in Python, Bash, or similar to automate and integrate remediation workflows
- Are pragmatic and adaptive—able to troubleshoot blockers and move forward in ambiguous environments
- Communicate clearly and proactively, fostering alignment and accountability across teams in a remote, distributed company
- Bring experience in vulnerability management, patch engineering, or endpoint hardening at scale in enterprise environments
What the job involves
- This role is on the Strava Security Team, which exists to protect Strava’s people, business, and data through integrated, proactive security practices
- We work across all security domains, including, but not limited to, product security, vulnerability management, incident response, infrastructure, network, governance, and enterprise security
- You are passionate about securing a platform that supports millions of athletes and their data every day
- Own the full lifecycle of vulnerability management—visibility, prioritization, and remediation—across a diverse tech stack
- Have a high-leverage impact on Strava’s risk posture by enabling timely, efficient, and measurable patching and hardening efforts
- You're excited to build automations and processes that eliminate manual toil and support continuous security improvement
- Collaborate across Engineering, IT, and Security to align technical execution with real-world risk reduction
- Leading efforts to identify, assess, and remediate vulnerabilities across endpoints, infrastructure, and SaaS systems
- Build scalable processes and automation for vulnerability ingestion, deduplication, enrichment, and routing
- Partner with Strava engineers and business teams to embed patching and configuration management into daily operations
- Prioritize engineering-focused solutions over manual processes, and continuously seeking ways to reduce friction
Our take
Strava has created an online network where runners, swimmers and cyclists can record fitness activities, and compare and compete with their community. It offers both a free and premium subscription service with added features. The company also partners with local councils and urban planners who purchase valuable journey data from Strava which can be used to map out cities and develop safer cycle paths.
The platform helps members discover and plan workouts, as well as offering a leaderboard which is updated using GPS as users compete for the top spot on particular fitness segments.
With over 125 million athletes and growing, Strava released several new product rollouts in 2024, including an AI-enabled leaderboard. A partnership with the wearable fitness tracker Oura will mean Strava software is available on wearables, taking the company into fresh competition with the likes of Peloton and Apple. In 2025, the company secured new funding in a round led by Sequoia Capital, growing its value to $2.2 billion.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-6% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Nov 2020
$110m
SERIES F
Oct 2014
$18m
LATE VC
Total funding: $151.4m
Company benefits
- Competitive base salary & stock options
- 100% company paid benefits for employees and families
- Flexible paid time off
- $2,000 annual professional development stipend
- Paid time off for volunteering
- 401(k) plan - with company matching
- $1000 annual gear stipend
- $500 annual gym or coaching reimbursement
- On-site fitness rooms with showers, lockers, and towel service
- Weekly team workouts – including remote employees
- Safe and secure bike storage on-site
- Weekly all hands meetings
- Employee resource groups
- Anti-racism nonprofit company matching program
- Free lunch on Wednesdays on-site
- Regular team happy hours
- Team offsites and company retreats
- Cell phone reimbursement
- Generous industry discounts on gear and activities
- Race entries to events we sponsor
- Snacks and stocked kitchens on-site
- Strava gear
Company HQ
Mission District, San Francisco, CA
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 23 more jobs at Strava