Senior Engineer, Strava
Governance, Risk, and Compliance
$212.1-248.2k
3 days a week in office
Social network for tracking run and cycle routes
Be an early applicant
Social network for tracking run and cycle routes
501-1000 employees
Be an early applicant
$212.1-248.2k
3 days a week in office
501-1000 employees
Company mission
To create the most committed, close, and engaged athlete community on the internet.
Role
Who you are
- Are passionate about embedding security, privacy, and compliance into the fabric of a high-growth platform used by millions of athletes
- Thrive in roles where you can apply engineering skills to solve governance, risk, and compliance challenges—not just document them
- Are excited to build automation, evidence pipelines, and control enforcement into CI/CD workflows, cloud environments, and developer tooling
- Being highly self-motivated and detail-oriented, with a strong sense of ownership over technical control implementation and audit deliverables
- Have supported or led technical readiness for NIST CSF, SOX, SOC 2, or other regulatory frameworks in high-growth or pre-IPO companies
- Bring deep experience writing and operationalizing security policies and procedures that map to frameworks like NIST CSF or ISO 27001
- Understand how to architect and implement controls across AWS, GitHub, Okta, and Terraform, and can build automation for evidence collection and control testing
- Have worked alongside developers and infrastructure teams to integrate GRC requirements into IaC, CI/CD, and identity platforms
- Are comfortable scripting or using tools to automate GRC tasks such as access reviews, exception tracking, and risk reporting
- Communicate clearly and proactively, driving cross-functional alignment and building trust between Security, Legal, Engineering, and external auditors
What the job involves
- This role is on the Strava Security Team, which exists to protect Strava’s people, business, and data through integrated, proactive security practices
- We work across all security domains, including, but not limited to, product security, vulnerability management, incident response, infrastructure, network, governance, and enterprise security
- Will have a high-leverage impact by aligning Strava’s technical environment with frameworks like: NIST CSF, SOX, and SOC 2 to support audit and IPO readiness
- Will collaborate with Engineering, Legal, and Security teams to write policies, define controls, and drive implementation with an engineering-first mindset
- Translating the requirements of NIST CSF, SOX, and SOC 2 into testable technical controls embedded within infrastructure, identity systems, and software delivery pipelines
- Partnering with engineering teams to design secure-by-default implementations that reduce risk while preserving speed and autonomy
- Authoring and maintaining policies and standards that are grounded in reality, aligned to NIST CSF, and adaptable to a dynamic cloud-native environment
- Leading evidence collection, audit preparation, and control design efforts across multiple domains in support of IPO-readiness and long-term compliance strategy
Our take
Strava has created an online network where runners, swimmers and cyclists can record fitness activities, and compare and compete with their community. It offers both a free and premium subscription service with added features. The company also partners with local councils and urban planners who purchase valuable journey data from Strava which can be used to map out cities and develop safer cycle paths.
The platform helps members discover and plan workouts, as well as offering a leaderboard which is updated using GPS as users compete for the top spot on particular fitness segments.
With over 125 million athletes and growing, Strava released several new product rollouts in 2024, including an AI-enabled leaderboard. A partnership with the wearable fitness tracker Oura will mean Strava software is available on wearables, taking Strava into fresh competition with the likes of Peloton and Apple.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-6% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Nov 2020
$110m
SERIES F
Oct 2014
$18m
LATE VC
Total funding: $151.4m
Company benefits
- Competitive base salary & stock options
- 100% company paid benefits for employees and families
- Flexible paid time off
- $2,000 annual professional development stipend
- Paid time off for volunteering
- 401(k) plan - with company matching
- $1000 annual gear stipend
- $500 annual gym or coaching reimbursement
- On-site fitness rooms with showers, lockers, and towel service
- Weekly team workouts – including remote employees
- Safe and secure bike storage on-site
- Weekly all hands meetings
- Employee resource groups
- Anti-racism nonprofit company matching program
- Free lunch on Wednesdays on-site
- Regular team happy hours
- Team offsites and company retreats
- Cell phone reimbursement
- Generous industry discounts on gear and activities
- Race entries to events we sponsor
- Snacks and stocked kitchens on-site
- Strava gear
Company HQ
Mission District, San Francisco, CA
Leadership
Mark Gainey
(Chairman)Having studied at Harvard, Mark started their career as a TA Associates Associate before co-founding Kana Communications and several Board Membership roles. They co-founded Strava in 2007, serving since as Chairman.
Michael Horvath
(CEO & Board Member)Michael co-founded Kana with Mark before working as an Economics Professor at Stanford and Dartmouth. They worked for 4 years as CFO of GlycoFi before co-founding Strava, serving initially as CEO and since 2017 as a Board Member.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 23 more jobs at Strava