Senior Engineer, Application Security

Job Description

About the Role

Title: Senior Engineer, Application Security

Location: San Francisco, CA

Job Description:

About this role

Strava is the app for active people. With over 150 million athletes in more than 190 countries, it’s more than tracking workouts—it’s where connection, motivation, and personal bests thrive. No matter your activity, gear, or goals, Strava’s got you covered. Find your crew, crush your milestones, and keep moving forward. Start your journey with Strava today.

This role is on the Strava Security Team, which exists to protect Strava’s users and business through integrated, proactive security practices.

We work on a variety of projects, including product security, vulnerability reduction, incident response, Strava’s bug bounty program, and network defenses.

We follow a flexible hybrid model that generally translates to around half your time on-site in our San Francisco office—roughly three days per week.

You’re excited about this opportunity because you:

Are excited to work on and support a platform that supports millions of users and their activities every day.

Enjoy developing, improving, and securing software and the software development process.

Enjoy working on the full cycle of automated security testing, release, and production operations across multiple platforms (mobile, frontend, backend, and infrastructure).

Will have a high leverage impact on product development by empowering all engineering teams to build a more secure product, faster.

Will help teams identify and implement the security prospects of multiple solutions that keep the organization safe from threats

You will be successful here by:

Being highly self-motivated and self-starting, with exceptional attention to detail

Being responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios

Working with Strava engineers to create secure-by-default solutions to business problems

Building empathy for your fellow engineers by developing a deep understanding of the product development process end-to-end

Seeking out engineering solutions to problems and eschewing toil

We’re excited about you because you:

Have previously worked in an AppSec or other software-focused role such as DevSecOps engineer, SRE, or platform engineer.

Have experience with modern principles of deploying software in containers across multiple teams and infrastructure environments.

Have experience with continuous integration environments, writing testable software, and test-driven development.

Program expertly in at least one high-level language such as Go, Scala, Python, or Ruby.

Can improvise and adapt. Rote processes won’t always work here, so bring your bag of tricks.

Are a strong, clear, and proactive communicator who values sharing knowledge with others. We are a distributed company spread across many time zones, dependent on many forms of communication to collaborate and achieve our goals.

Compensation Overview

At Strava, we know our employees are the most important ingredient to our success, and our compensation and total rewards programs reflect that. We take a market-based approach to pay, and pay may vary depending on the department and your location. Salary ranges are categorized into one of three tiers based on a cost of labor index for that geographic area. We will determine the candidate’s starting pay based on job-related skills, experience, qualifications, work location, and market conditions. We may modify these ranges in the future. For more information, please contact your talent partner.

Compensation: $145,000 – 195,000. The base salary posted is within the compensation range for this role. This range reflects base pay only and does not include, equity, or benefits. Your recruiter can share more about the specific salary range for your location during the hiring process.