Enterprise Security Engineer

Enterprise Security Engineer

Requirements

• Have previously worked in an Enterprise Security or Information Technology with a heavy focus on securing endpoint hardening, MFA, SaaS security, Corporate Networks, APIs, and identity and access management best practices
• Have experience with modern principles of transparent and user focused security
• Have experience partnering with IT teams to implement and maintain solutions at the corporate level
• Have experience with continuous integration environments, writing testable software, and test-driven development
• Have working knowledge of the OWASP Top 10 as well as risk-based security practices, including threat modeling
• Hands on experience securing Google Workspace, Okta, and other top corporate SaaS solutions
• Script in a least one language such as Python
• Are a strong, clear, and proactive communicator who values sharing knowledge with others

Responsibilities

• Being responsible for analyzing the security of SaaS applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios
• Working with Strava engineers and business partners to create secure-by-default solutions to business problems
• Building empathy for your Strava Colleagues by developing a deep understanding of the product development process end-to-end
• Seeking out engineering solutions to problems and eschewing toil

Preferred Qualifications

• Can improvise and adapt. Rote processes won’t always work here, so bring your bag of tricks.