Security Engineer

Socket.dev; Toronto; On-site; CAD 126,000 - 154,000; Full time

Job summary

Relay is seeking a Security Engineer to join the purple team in its security organization in Toronto. You will design and run exercises to test defenses, surface vulnerabilities, and drive improvements while collaborating with senior security engineers who will mentor you to grow quickly.

As part of the purple team, you will own increasingly meaningful workstreams, work across offensive and defensive security, and help implement robust security controls within cloud and development environments.

Qualifications

• 2–4 years of security experience or adjacent technical role.
• Solid grasp of security fundamentals: how systems are attacked and defended.
• Able to script to automate tasks or build small tools.
• Comfortable working in cloud and developer environments (AWS, GCP, Azure; GitHub, CI/CD).
• Experience with adversary simulation, detection engineering, penetration testing, incident response, or vulnerability management.
• Understanding authentication and access protocols (SSO, OAuth, SAML, OpenID Connect) or zero trust principles.
• Familiar with security tools across the stack (SIEM, IPS, WAF, EDR, scanners, automation).

Responsibilities

• Help plan and run security simulations and contribute to the security awareness program.
• Review data access in Relay's admin dashboards and implement improvements.
• Strengthen security for developer environments, including tooling and access to production.
• Turn test findings into fixes and shepherd them through to completion.
• Develop and manage Cyber Awareness exercises, including phishing simulations.
• Research emerging threats and translate findings to Relay-specific context.
• Share findings clearly to educate and drive action within security culture.

Skills

Security fundamentals

Scripting

Cloud environments

Communication

Adversary simulation

Tools

SIEM

EDR

WAF

Vulnerability scanners

Job description

Relay is a digital banking platform that gives self-made business owners the tools and know-how to be great with money—bringing clarity, confidence, and control to every dollar earned, so they can turn hard work into lasting success.

Our mission is to increase the success rate of small businesses. Traditional banking has been a growth limiter rather than a growth enabler. We're changing that. Relay is the all-in-one, collaborative money management platform. We're building for employer SMBs and their finance function, and delivering a human-centric customer experience.

Relay is entering an exciting new chapter of growth, and we're looking for a Security Engineer to join the purple team in our security organization. This is a rare early-career opportunity to work across both offensive and defensive security with the mentorship and support to grow quickly.

As a Security Engineer on Relay's purple team, you'll help design and run exercises that test our defenses, surface vulnerabilities, and drive real improvements. You'll work closely with senior security engineers who will coach you through the harder problems, and you'll take increasing ownership of your own workstreams as you build depth.

What You’ll Be Doing

• Help plan and run security simulations, and contribute to the security awareness program that comes out of them

• Review how sensitive customer and financial data is accessed in Relay's admin dashboards, and help implement improvements

• Contribute to strengthening security for our developer environments, including tooling, packages, and access to production

• Work alongside delivery, IT, and business teams to turn test findings into tangible fixes, and follow them through to done

• Develop and manage Cyber Awareness exercises, including internal phishing attacks

• Research emerging threats (e.g. AI misuse, supply chain risks, identity and access challenges, Shadow IT) and help the team figure out what they mean in Relay's context

• Share what you find in a way that educates and drives action, building your voice in Relay's security culture

Who You Are

• You have roughly 2–4 years of experience in security, or in an adjacent technical role (IT, infrastructure, software engineering, SOC) with meaningful security exposure

• You have a solid grasp of security fundamentals: how systems get attacked, how they get defended, and why. You may have gone deep on one side and be eager to learn the other

• You can script (Python, Bash, PowerShell, JavaScript, etc.) well enough to automate a task, pull apart data, or build a small tool, and you're comfortable getting better at it

• You're comfortable working in cloud and developer environments (AWS, GCP, or Azure; GitHub, CI/CD) and can find your way around them

• You're motivated by closing the loop. You don't just want to identify vulnerabilities, you want to see them fixed

• You're curious, pragmatic, and collaborative; you ask questions early, you say when you're stuck, and exploring new threats gives you energy

• You can explain a technical finding to someone who isn't in security without losing them

• You thrive in fast paced environments and embrace change

• You have hands-on experience with adversary simulation, detection engineering, penetration testing, incident response, or vulnerability management

• You understand authentication and access protocols (SSO, OAuth, SAML, OpenID Connect) or have worked with zero trust principles

• You have used tools across the security stack, from SIEM, IPS, WAF and EDR to vulnerability scanners and security automation platforms

Bonus Points

• You have experience with cloud IAM, networking, or containerized systems like Docker or Kubernetes

• You have participated in purple, red, or blue team rituals

• You have experience in fintech, SaaS, or scaling tech companies

• You have public security contributions, CTF participation, a home lab, bug bounties, talks, research, or OSS tooling

The Interview Process

• Stage 1: A 45-minute Google Meet call with a member of the Talent team

• Stage 2: A 45-minute experience deep dive interview with the Senior Engineering Manager

• Stage 3: A 60-minute live technical assessment via Google Meet, or in person, with a panel of interviewers

• Stage 4: A 45-minute in-person interview with a member of the Leadership team

Our Compensation Approach

We believe Relayers should feel rewarded for the impact they have on our mission and growth. Compensation follows impact. As impact increases, compensation grows, and we do not limit compensation changes to a once-a-year review cycle.

The annual salary range for this role is $126,000 CAD to $154,000 CAD.

For candidates who demonstrate full readiness for the defined scope of the role, the typical starting salary is $140,000 CAD. Offers below this point reflect candidates we believe can grow into the full scope of the role with support and development. Offers above this point reflect impact that meaningfully exceeds the role’s defined expectations or an expanded scope from day one.

We encourage you to have a conversation with your recruiter and ask questions about compensation throughout the hiring process. For more information on our compensation philosophy and perks and benefits, visit our Candidate Hub.

Why Relay Might Be the Perfect Fit For You

• You push relentlessly for reinvention: You're always asking "how can this be better?" -- in your work, in your craft, in yourself. Comfort is a signal to push harder, not coast. You'd rather build something better than defend something familiar.

• You crave autonomy: We trust our team with big challenges and the freedom to solve them. If you’re someone who takes initiative, is comfortable taking risks, and seeks input when needed, you’ll find the freedom here empowering.

• You own your work: You take pride in your work, follow through on commitments, and feel a deep sense of responsibility for outcomes, not just tasks.

• You build with AI, not just use it: You're actively embedding AI into how you work, pushing what's possible, and bringing your team along with you.

• You care about impact, not noise: You care deeply about the substance of your work. You measure success by results, not recognition, and you let your work speak for itself.

• You’re energized by complexity and ambiguity: You enjoy tackling problems that don’t come with a playbook. You’re comfortable building from scratch, iterating as you go, and collaborating to shape the best path forward.

• You seek out feedback: You see directness as respect, not criticism. You actively seek input, sit with hard truths, and use feedback as fuel for improvement.

• Small businesses are why we're here: Relay exists to help them thrive -- and that mission has to resonate with you.

Join Us

We're looking for people who are relentless, curious, and care deeply about the work. You're encouraged to apply even if your experience doesn't perfectly match the job description -- your perspective and drive matter more. We welcome diverse backgrounds and people who think critically, challenge the status quo, and want to help small businesses thrive.

If you require accommodations at any stage of the hiring process, please reach out to your Talent Partner.

Disclaimer: For compliance reasons, all offers of employment at Relay are conditional upon a successful background check and employment verification through Certn.