Security Engineer at Relay

Job description

Relay is a digital banking platform that gives self-made business owners the tools and know-how to be great with money—bringing clarity, confidence, and control to every dollar earned, so they can turn hard work into lasting success. We do this by replacing financial guesswork with real visibility, transforming cash flow from a constant source of stress into a clear signal owners can use to run stronger, more resilient businesses. Our mission is to increase the success rate of small businesses. Traditional banking has been a growth limiter rather than a growth enabler. We're changing that. Relay is the all-in-one, collaborative money management platform. We're building for employer SMBs and their finance function, and delivering a human-centric customer experience. Relay is entering an exciting new chapter of growth, and we're looking for a Security Engineer to join the purple team in our security organization. This is a rare early-career opportunity to work across both offensive and defensive security with the mentorship and support to grow quickly. As a Security Engineer on Relay's purple team, you'll help design and run exercises that test our defenses, surface vulnerabilities, and drive real improvements. You'll work closely with senior security engineers who will coach you through the harder problems, and you'll take increasing ownership of your own workstreams as you build depth. WHAT YOU’LL BE DOING - Help plan and run security simulations, and contribute to the security awareness program that comes out of them - Review how sensitive customer and financial data is accessed in Relay's admin dashboards, and help implement improvements - Contribute to strengthening security for our developer environments, including tooling, packages, and access to production - Work alongside delivery, IT, and business teams to turn test findings into tangible fixes, and follow them through to done - Develop and manage Cyber Awareness exercises, including internal phishing attacks - Research emerging threats (e.g. AI misuse, supply chain risks, identity and access challenges, Shadow IT) and help the team figure out what they mean in Relay's context - Share what you find in a way that educates and drives action, building your voice in Relay's security culture WHO YOU ARE - You have roughly 2–4 years of experience in security, or in an adjacent technical role (IT, infrastructure, software engineering, SOC) with meaningful security exposure - You have a solid grasp of security fundamentals: how systems get attacked, how they get defended, and why. You may have gone deep on one side and be eager to learn the other - You can script (Python, Bash, PowerShell, JavaScript, etc.) well enough to automate a task, pull apart data, or build a small tool, and you're comfortable getting better at it - You're comfortable working in cloud and developer environments (AWS, GCP, or Azure; GitHub, CI/CD) and can find your way around them - You're motivated by closing the loop. You don't just want to identify vulnerabilities, you want to see them fixed - You're curious, pragmatic, and collaborative; you ask questions early, you say when you're stuck, and exploring new threats gives you energy - You can explain a technical finding to someone who isn't in security without losing them - You thrive in fast paced environments and embrace change - You have hands-on experience with adversary simulation, detection engineering, penetration testing, incident response, or vulnerability management - You understand authentication and access protocols (SSO, OAuth, SAML, OpenID Connect) or have worked with zero trust principles - You have used tools across the security stack, from SIEM, IPS, WAF and EDR to vulnerability scanners and security automation platforms BONUS POINTS - You have experience with cloud IAM, networking, or containerized systems like Docker or Kubernetes - You have participated in purple, red, or blue team rituals - You have experience in fintech, SaaS, or scaling tech companies - You have public security contributions, CTF participation, a home lab, bug bounties, talks, research, or OSS tooling THE INTERVIEW PROCESS - Stage 1: A 45-minute Google Meet call with a member of the Talent team - Stage 2: A 45-minute experience deep dive interview with the Senior Engineering Manager and Senior Security Engineer - Stage 3: A 60-minute live technical assessment via Google Meet, or in person, with a panel of interviewers - Stage 4: A 45-minute in-person interview with a member of the Leadership team OUR COMPENSATION APPROACH We believe Relayers should feel rewarded for the impact they have on our mission and growth. Compensation follows impact. As impact increases, compensation grows, and we do not limit compensation changes to a once-a-year review cycle. The annual salary range for this role is $126,000 CAD to $154,000 CAD. For candidates who demonstrate full readiness for the defined scope of the role, the typical starting salary is $140,000 CAD. Offers below this point reflect candidates we believe can grow into the full scope of the role with support and development. Offers above this point reflect impact that meaningfully exceeds the role’s defined expectations or an expanded scope from day one. We encourage you to have a conversation with your recruiter and ask questions about compensation throughout the hiring process. For more information on our compensation philosophy and perks and benefits, visit our Candidate Hub notion.so. Why Relay Might Be the Perfect Fit For You - You push relentlessly for reinvention: You're always asking "how can this be better?" -- in your work, in your craft, in yourself. Comfort is a signal to push harder, not coast. You'd rather build something better than defend something familiar. - You crave autonomy: We trust our team with big challenges and the freedom to solve them. If you’re someone who takes initiative, is comfortable taking risks, and seeks input when needed, you’ll find the freedom here empowering. - You own your work: You take pride in your work, follow through on commitments, and feel a deep sense of responsibility for outcomes, not just tasks. - You build with AI, not just use it: You're actively embedding AI into how you work, pushing what's possible, and bringing your team along with you. - You care about impact, not noise: You care deeply about the substance of your work. You measure success by results, not recognition, and you let your work speak for itself. - You’re energized by complexity and ambiguity: You enjoy tackling problems that don’t come with a playbook. You’re comfortable building from scratch, iterating as you go, and collaborating to shape the best path forward. - You seek out feedback: You see directness as respect, not criticism. You actively seek input, sit with hard truths, and use feedback as fuel for improvement. - Small businesses are why we're here: Relay exists to help them thrive -- and that mission has to resonate with you. Join Us We're looking for people who are relentless, curious, and care deeply about the work. You're encouraged to apply even if your experience doesn't perfectly match the job description -- your perspective and drive matter more. We welcome diverse backgrounds and people who think critically, challenge the status quo, and want to help small businesses thrive. If you require accommodations at any stage of the hiring process, please reach out to your Talent Partner. Disclaimer: For compliance reasons, all offers of employment at Relay are conditional upon a successful background check and employment verification through Certn. Important Notice: Relay’s recruitment team only contacts candidates and corresponds from official corporate email addresses ending in @relayfi.com. We will never ask for sensitive personal data (such as bank account details, credit card numbers, or social security/insurance numbers) during the initial application or interview stages.

Requirements

Must-haves

Help plan and run security simulations, and contribute to the security awareness program that comes out of them
Review how sensitive customer and financial data is accessed in Relay's admin dashboards, and help implement improvements
Contribute to strengthening security for our developer environments, including tooling, packages, and access to production
Work alongside delivery, IT, and business teams to turn test findings into tangible fixes, and follow them through to done
Develop and manage Cyber Awareness exercises, including internal phishing attacks
Research emerging threats (e.g. AI misuse, supply chain risks, identity and access challenges, Shadow IT) and help the team figure out what they mean in Relay's context
Share what you find in a way that educates and drives action, building your voice in Relay's security culture
You have roughly 2–4 years of experience in security, or in an adjacent technical role (IT, infrastructure, software engineering, SOC) with meaningful security exposure
You have a solid grasp of security fundamentals: how systems get attacked, how they get defended, and why. You may have gone deep on one side and be eager to learn the other
You can script (Python, Bash, PowerShell, JavaScript, etc.) well enough to automate a task, pull apart data, or build a small tool, and you're comfortable getting better at it
You're comfortable working in cloud and developer environments (AWS, GCP, or Azure; GitHub, CI/CD) and can find your way around them
You're motivated by closing the loop. You don't just want to identify vulnerabilities, you want to see them fixed
You're curious, pragmatic, and collaborative; you ask questions early, you say when you're stuck, and exploring new threats gives you energy
You can explain a technical finding to someone who isn't in security without losing them
You thrive in fast paced environments and embrace change
You have hands-on experience with adversary simulation, detection engineering, penetration testing, incident response, or vulnerability management
You understand authentication and access protocols (SSO, OAuth, SAML, OpenID Connect) or have worked with zero trust principles
You have used tools across the security stack, from SIEM, IPS, WAF and EDR to vulnerability scanners and security automation platforms
Stage 1: A 45-minute Google Meet call with a member of the Talent team
Stage 2: A 45-minute experience deep dive interview with the Senior Engineering Manager and Senior Security Engineer

Nice-to-haves

You have experience with cloud IAM, networking, or containerized systems like Docker or Kubernetes
You have participated in purple, red, or blue team rituals
You have experience in fintech, SaaS, or scaling tech companies
You have public security contributions, CTF participation, a home lab, bug bounties, talks, research, or OSS tooling

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aipythonjavascriptawsgcpazureci/cddockerkubernetesgo

Platform: ashby
Effort: quick