Autonomous AppSec Engineer II: Threat Modeling & Fixes

Better Tomorrow Ventures; Toronto; On-site; CAD 126,000 - 154,000; Full time

Job summary

Relay in Toronto, ON, Canada is seeking an Application Security Engineer II to own end-to-end testing of defined services. You will work across our stack, from TypeScript/Node.js to Postgres and AWS, ensuring secure design and deployment with a security-first mindset.

You’ll partner with senior engineers to build guardrails, improve tooling like DAST, and mentor teammates. This role emphasizes autonomy, collaboration, and a hands-on approach to secure software delivery.

Qualifications

• 2–4 years of professional security experience, applied to applications
• Production-grade software experience
• Strong understanding of OWASP Top 10 and real-world mitigations

Responsibilities

• Threat model technical designs and conduct white-box testing
• Triage bug reports, reproduce issues, coordinate fixes with owners
• Contribute fixes directly to Relay’s codebase when appropriate
• Work with security tooling (Datadog, Burp Suite) and AI workflows

Skills

Threat modeling

Penetration testing

AI tooling

Clear communicator

Ownership

Tools

Burp Suite

Datadog

Job description

Relay in Toronto, ON, Canada is seeking an Application Security Engineer II to own end-to-end testing of defined services. You will work across our stack, from TypeScript/Node.js to Postgres and AWS, ensuring secure design and deployment with a security-first mindset.

You’ll partner with senior engineers to build guardrails, improve tooling like DAST, and mentor teammates. This role emphasizes autonomy, collaboration, and a hands-on approach to secure software delivery.