Strava is the app for active people. With over 200 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count. Start your journey with Strava today.
Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward.
About This Role
Strava's Security team protects the platform, the data, and the trust of more than 200 million athletes worldwide. As threats against consumer platforms grow more sophisticated, this team is responsible for detecting, investigating, and responding to them quickly and confidently.
We're looking for a Senior Manager, Detection & Response to own and scale this function, reporting to the CISO. You'll set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement covering both our corporate environment and the Strava product. You'll build and manage a small team of engineers, decide how to extend that team's reach through automation and strategic partners, and partner closely with Infrastructure, Product Security, Enterprise Security, IT, and Engineering to make sure detection and response capabilities are built into our systems by design. This is a role for a technically hands-on leader who's naturally curious and comfortable digging in without all the facts, in a high-growth environment.
We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office, three days per week.
What You'll Do
Lead incident response and security operations, acting as the senior escalation point and incident commander during active investigations
Build and mature detection engineering across cloud, endpoint, and application layers (Strava product surface), continuously raising detection quality and coverage
Own the security logging and telemetry pipeline, ensuring the right data is collected, normalized, and usable for detection
Shape the operating model for the function, deciding what we build in-house versus deliver through managed services and strategic vendors, and holding those partners accountable for measurable security outcomes
Leverage outside threat intel to proactively improve detection
Modernize the SOC with automation and AI to increase coverage and speed up response
Manage incident playbooks, on-call and escalation paths, and run tabletop exercises
Deliver clear, executive-ready reporting on incident trends, coverage, and program maturity
Build, manage and coach a small team of detection and response engineers
Apply threat intelligence and a working knowledge of adversary tradecraft to drive proactive detection and threat hunting
What You'll Bring to the Team
A highly collaborative, low-ego approach to working across security, engineering, and other partner teams
Deep technical credibility and operational instincts, with a track record of building or scaling a detection engineering or security operations program
Sound understanding of modern adversary tradecraft, with experience turning threat intelligence into practical detection strategies, proactive hunts, and response actions
Experience extending a lean team's coverage through managed services or security vendors, including selecting partners and holding them accountable to measurable outcomes
Track record leading incident command for security incidents involving multiple stakeholders, from working teams to executive leadership
Excellent problem-solving instincts and comfort operating with ambiguity, including the judgment to think beyond established playbooks when a situation calls for it, and a steady, structured presence during active incidents
Familiarity applying automation or AI/ML techniques to security operations
Excellent written and verbal communication, including reporting to executive audiences
Movement brings us together. At Strava, we’re building the world’s largest community of active people, helping them stay motivated and achieve their goals.
Our global team is passionate about making movement fun, meaningful, and accessible to everyone. Whether you’re shaping the technology, growing our community, or driving innovation, your work at Strava makes an impact.
When you join Strava, you’re not just joining a company—you’re joining a movement. If you’re ready to bring your energy, ideas, and drive, let’s build something incredible together.
Strava builds software that makes the best part of our athletes’ days even better. Just as we’re deeply committed to unlocking their potential, we’re dedicated to providing a world-class, inclusive workplace where our employees can grow and thrive, too. We’re backed by Sequoia Capital, TCV, Madrone Partners and Jackson Square Ventures, and we’re expanding in order to exceed the needs of our growing community of global athletes. Our culture reflects our community. We are continuously striving to hire and engage teammates from all backgrounds, experiences and perspectives because we know we are a stronger team together.
Strava is an equal opportunity employer. In keeping with the values of Strava, we make all employment decisions including hiring, evaluation, termination, promotional and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
California Consumer Protection Act Applicant Notice
Skills Required
- Proven track record building or scaling a detection engineering or security operations program
- Experience leading incident command for security incidents involving multiple stakeholders and executives
- Experience building and maturing detection across cloud, endpoint, and application layers
- Ownership experience with security logging and telemetry pipelines (collection, normalization, usability)
- Experience selecting and managing managed services or security vendors and measuring outcomes
- Ability to apply threat intelligence and adversary tradecraft to detection, hunting, and response
- Experience managing incident playbooks, on-call rotations, escalation paths, and tabletop exercises
- Experience building and managing a small team of detection and response engineers
- Familiarity applying automation or AI/ML techniques to security operations
- Excellent written and verbal communication, including executive reporting
- Collaborative, low-ego approach working with security, engineering, and partner teams
Strava Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Strava and has not been reviewed or approved by Strava.
-
Fair & Transparent Compensation — Pay is considered competitive and compensation is broadly viewed as fair, even if not consistently at the very top of the market. Overall satisfaction appears stronger when factoring in cash pay and benefits.
-
Healthcare Strength — Healthcare coverage is often described as fully covered for employees and families, standing out as a core strength of the package. This reduces out-of-pocket costs while supporting comprehensive medical, dental, and vision access.
-
Wellbeing & Lifestyle Benefits — Wellness-oriented perks such as health club support, event entry reimbursements, and gear or home-office stipends are highlighted as meaningful. These benefits align closely with an active, athlete-focused culture and add tangible value beyond salary.
Strava Insights
What We Do
Strava is Swedish for “strive,” which epitomizes who we are and what we do. We’re a passionate and committed team, unified by our mission to connect athletes to what motivates them and help them find their personal best. And with billions of activity uploads from all over the world, we have a humbling and audacious vision: to be the record of the world’s athletic activities and the technology that makes every effort count. Strava builds software that makes the best part of our athletes’ days even better. And just as we’re deeply committed to unlocking their potential, we’re dedicated to providing a world-class, inclusive workplace where our employees can grow and thrive, too. We’re backed by Sequoia Capital, Madrone Partners and Jackson Square Ventures, and we’re expanding in order to exceed the needs of our growing community of global athletes. Our culture reflects our community – we are continuously striving to hire and engage diverse teammates from all backgrounds, experiences and perspectives because we know we are a stronger team together.When you’re ready for a challenge and a team that will support you along the way, join us!
