Senior Staff Engineer - Data Security/Privacy

About this role

Strava is the app for active people. With over 150 million athletes in more than 185 countries, Strava is where connection, motivation, and personal bests thrive. No matter your activity, gear, or goals, we help you find your crew, crush your milestones, and keep moving forward. Start your journey with Strava today.

Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward.

This role is on the Strava Security Team, which exists to protect Strava’s people, business, and data through integrated, proactive security practices.

We work across all security domains, including, but not limited to, product security, vulnerability management, incident response, infrastructure, network, governance, and enterprise security.

We follow a flexible hybrid model that generally translates to around half your time on-site in our San Francisco, CA or Denver, CO office—roughly three days per week.

What You’ll Do:

• Are passionate about safeguarding the sensitive data that powers a platform used by millions of athletes around the world
• Thrive in cross-functional environments where you can shape data security and privacy architecture in partnership with Engineering, Legal, and Product teams
• Will have a high-leverage impact by driving secure and privacy-respecting data design patterns at scale across diverse systems
• Are excited to advise on the lifecycle of sensitive data—from ingestion and processing to storage and deletion—ensuring appropriate controls at each stage
• Will collaborate across functions to define and implement scalable frameworks for metadata tagging, access governance, and encryption

You Will Be Successful Here By:

• Being a trusted advisor to engineering, analytics, and business stakeholders on data security and privacy architecture
• Leading the design and implementation of data classification, labeling, and protection frameworks across structured and unstructured sources
• Guiding teams through secure-by-design decisions for new features, infrastructure changes, and data integrations
• Establishing encryption, key management, and access control standards that are adaptable to diverse workloads and environments
• Translating regulatory and business requirements into pragmatic, scalable technical designs that support velocity without compromising safety

What You’ll Bring to the Team:

• Bring deep experience guiding the secure and compliant use of data across engineering, analytics, and legal/privacy functions
• Have designed and deployed metadata-driven classification systems and scalable protection controls across data pipelines, cloud storage, and SaaS tools
• Understand how to architect and advise on encryption standards, key management, access controls, and data retention strategies in complex environments
• Have worked with both off-the-shelf tools (e.g., BigID, OneTrust, AWS Macie) and in-house solutions to meet nuanced business and regulatory needs
• Are comfortable navigating ambiguity and tradeoffs, balancing privacy, compliance, and usability through clear technical and architectural guidance
• Communicate proactively and clearly across disciplines, driving alignment on shared principles and building durable frameworks for data trust

Compensation Overview

At Strava, we know our employees are the most important ingredient to our success, and our compensation and total rewards programs reflect that. We take a market-based approach to pay, and pay may vary depending on the department and your location. Salary ranges are categorized into one of three tiers based on a cost of labor index for that geographic area. We will determine the candidate’s starting pay based on job-related skills, experience, qualifications, work location, and market conditions. We may modify these ranges in the future. For more information, please contact your talent partner.

Compensation: $286,000 - $334,750. This range reflects base compensation only and does not include equity or benefits. Your recruiter can share more details about the full compensation package, including the range specific to your location, during the hiring process.

For more information on benefits, please click here.

Why Join Us?

Movement brings us together. At Strava, we’re building the world’s largest community of active people, helping them stay motivated an