We're putting together a talented team to build the #1 training platform for Runners

We help everyday runners become outstanding by providing world-class training, coaching and community for everyone, whether you're improving your 5k time or training for your first marathon. To date we have built iOS, Android and Apple watch apps that help people achieve their goals by coaching them through the full journey and syncing to their favourite fitness devices.

We’re growing extremely fast! in November 2023 we closed a £5M funding round led by JamJar with participation from Eka Ventures, Venrex and Creator Ventures. In 2024, we were selected by Apple as one of three global finalists for the 2024 iPhone App of the Year, reflecting the innovation and impact of what we’ve built & now in 2025 we have ****just been acquired by Strava! 🤯 🎉

We want to grow as fast as we can into the future and are looking for individuals who will help us get there. Our aim is to reach millions of subscribers and be the go-to training platform for any runner. Now is a magical time to join and with our recent acquisition it makes the journey even more exciting! 🚀

Who we’re looking for

We are looking for a talented, creative, and proactive Security Engineer to join our highly skilled cross-functional engineering team and take ownership of security across the entire organisation. As the first security engineer, you’ll lead efforts to ensure our cloud infrastructure, applications, and internal processes meet the highest security standards. You’ll work closely with the engineering, product, and leadership teams to establish a strong security culture while also ensuring compliance with relevant regulations.

You will partner with our CTO and founders to shape the future of security at Runna and play a critical role in safeguarding our product as we scale. As our first dedicated security hire, you’ll have the freedom and support to build a security roadmap from the ground up.

As a Security Engineer, your role will include:

• Lead the effort to secure our cloud infrastructure, ensuring secure deployments, access controls, and robust incident response strategies.
• Establish security monitoring and alerting to detect, respond to, and mitigate potential threats in real-time.
• Own and drive compliance initiatives (such as GDPR, Cyber essentials) to ensure our organisation meets the required standards.
• Implement and enforce best practices for encryption, identity and access management (IAM), and network security across the platform.
• Partner with product, engineering, and business teams to ensure security is embedded in all stages of development and product lifecycle.
• Create and manage a bug bounty program to incentivise external researchers to identify and report security vulnerabilities.
• Educate and train the wider team on security best practices, fostering a security-first mindset across the organisation.
• Stay ahead of emerging threats and technologies, ensuring we adopt the latest tools and practices to maintain a secure environment.
• Collaborate with external security firms for audits, penetration testing, and other assessments to validate our security posture.

What experience we’re looking for

If you don’t quite meet all of the below skills, we’d still love to hear from you as we might be able to tweak the role slightly or offer you a position better suited for you. You can apply directly below or contact us if you’re still unsure.

Your key experience:

• 1+ years in a Security Engineering role or similar
• 2+ years working with cloud infrastructure (preferably AWS) or as a platform engineer
• You’ve led the development and implementation of key security projects