Senior Engineer, Strava

Application and Security Infrastructure

£93.5-110k

AWS

Kubernetes

Senior and Expert level

London

3 days a week in office

Social network for tracking run and cycle routes

Be an early applicant

Social network for tracking run and cycle routes

501-1000 employees

B2CFitnessSocialSaaSCommunity

Be an early applicant

£93.5-110k

AWS

Kubernetes

Senior and Expert level

London

3 days a week in office

501-1000 employees

B2CFitnessSocialSaaSCommunity

Company mission

To create the most committed, close, and engaged athlete community on the internet.

Job

Company

Role

Who you are

Being highly self-motivated and detail-oriented, with a strong sense of ownership for Strava’s regional application and infrastructure security posture
Serving as the primary security point of contact for Strava Group in the EU, bridging global strategy with local implementation and compliance
Driving secure-by-design practices across engineering teams, including threat modeling, architecture reviews, and vulnerability management
Partnering with Engineering and Infrastructure teams to embed automated security checks into CI/CD pipelines and infrastructure-as-code deployments
Coordinating regional incident response, vulnerability triage, and remediation validation in partnership with the global security team
Bring hands-on experience in application and infrastructure security, including code review, threat modeling, and securing cloud-native environments (AWS preferred)
Have designed or implemented automated security controls in CI/CD pipelines using tools like Semgrep, Tenable, GHAS, Snyk, or custom scripting
Understand how to secure containerized and distributed environments, including Kubernetes, IAM, and network segmentation
Are comfortable managing vulnerability management programs end-to-end — from detection and prioritization through engineering remediation
Have familiarity with EU security and privacy frameworks (GDPR, NIS2) and know how to apply them pragmatically to cloud infrastructure and data systems
Are collaborative and pragmatic — able to influence engineering teams through partnership, technical credibility, and clear communication
Communicate proactively and effectively across technical and non-technical stakeholders, ensuring alignment between EU operations and global security strategy

What the job involves

This role is on the Strava Security Team, which exists to protect Strava’s people, business, and data through integrated, proactive security practices
We work across all security domains, including, but not limited to, product security, vulnerability management, incident response, infrastructure, network, governance, and enterprise security
Are passionate about protecting a platform that supports millions of athletes by ensuring Strava’s applications and infrastructure are secure, resilient, and compliant across regions
Enjoy working closely with engineering, infrastructure, and security teams to design and implement secure architectures and development practices
Will have a high-leverage impact by shaping how Strava manages application and infrastructure risks in the EU, ensuring speed, accuracy, and consistency in remediation and governance
Are excited to build automated workflows that identify vulnerabilities early, enforce secure configurations, and strengthen our CI/CD and cloud security controls
Will collaborate across Security, Engineering, Legal, and Compliance to ensure that systems, processes, and data handling meet EU regulatory standards and Strava’s global security expectations

Salary benchmarks

Our take

Strava has created an online network where runners, swimmers and cyclists can record fitness activities, and compare and compete with their community. It offers both a free and premium subscription service with added features. The company also partners with local councils and urban planners who purchase valuable journey data from Strava which can be used to map out cities and develop safer cycle paths.

The platform helps members discover and plan workouts, as well as offering a leaderboard which is updated using GPS as users compete for the top spot on particular fitness segments.

With over 125 million athletes and growing, Strava released several new product rollouts in 2024, including an AI-enabled leaderboard. A partnership with the wearable fitness tracker Oura will mean Strava software is available on wearables, taking the company into fresh competition with the likes of Peloton and Apple. In 2025, the company secured new funding in a round led by Sequoia Capital, growing its value to $2.2 billion.