Security Engineer

Relay; Toronto; Hybrid; CAD 70,000 - 120,000; Full time

Benefits offered by this job

Equity

Social events

Mentorship

Parental leave top-up

Health benefits

Hybrid work

Equipment

Flexible vacation

Dog-friendly

Industry awards

Job summary

Relay is seeking a Security Engineer to join the purple team and help design and run exercises that test defenses, surface vulnerabilities, and drive real improvements.

You will work with senior security engineers who will coach you, taking increasing ownership of your workstreams as you grow. The role spans cloud, developer environments, and security awareness initiatives.

Qualifications

• You have hands-on experience with adversary simulation, detection engineering, penetration testing, incident response, or vulnerability management.
• You can script (Python, Bash, PowerShell, JavaScript, etc.) to automate tasks or build small tools.
• You understand authentication and access protocols (SSO, OAuth, SAML, OpenID Connect) and cloud environments (AWS, GCP, Azure).

Responsibilities

• Help plan and run security simulations and drive improvements.
• Review access to sensitive customer and financial data in admin dashboards and implement improvements.
• Strengthen security for developer environments, including tooling and access to production.
• Turn test findings into tangible fixes and drive them to completion.
• Share findings to educate and drive action within Relay’s security culture.

Skills

Security tooling

Adversary simulation

Scripting

Cloud/DevOps

Threat intel

Communication

Collaboration

Zero Trust

Tools

SIEM

IPS

WAF

EDR

Vulnerability scanners

Security automation

Job description

• Relay is entering an exciting new chapter of growth, and we’re looking for a Security Engineer to join the purple team in our security organization. This is a rare early-career opportunity to work across both offensive and defensive security with the mentorship and support to grow quickly
• As a Security Engineer on Relay’s purple team, you’ll help design and run exercises that test our defenses, surface vulnerabilities, and drive real improvements. You’ll work closely with senior security engineers who will coach you through the harder problems, and you’ll take increasing ownership of your own workstreams as you build depth
• Help plan and run security simulations, and contribute to the security awareness program that comes out of them
• Review how sensitive customer and financial data is accessed in Relay’s admin dashboards, and help implement improvements
• Contribute to strengthening security for our developer environments, including tooling, packages, and access to production
• Work alongside delivery, IT, and business teams to turn test findings into tangible fixes, and follow them through to done
• Develop and manage Cyber Awareness exercises, including internal phishing attacks
• Research emerging threats (e.g. AI misuse, supply chain risks, identity and access challenges, Shadow IT) and help the team figure out what they mean in Relay’s context
• Share what you find in a way that educates and drives action, building your voice in Relay’s security culture

Benefits

• Competitive salary and meaningful equity: Relay employees are Relay owners, complete with equity and a competitive salary. Since 2023, 66%+ of employees have received salary increases, with multiple new team members joining just last year.
• Social connection: We believe in celebrating our wins with two annual company-wide get-togethers, quarterly team events, happy hours, and special events and networking opportunities with industry leaders.
• Personal and professional growth: Through ongoing feedback, mentorship, and coaching, work with peers and leaders who are invested in your growth and success. Even with more than half of our team joining in the last 12 months, almost 20% have received promotions in the last year alone.
• Parental leave with top-up: We offer 12 weeks off with a 100% salary top-up for all full-time employees, regardless of location, and accessible for all parents: birthing, non-birthing, and adoptive
• Comprehensive health benefits: Enjoy full health benefits from day one: no probation period required. We offer flexible Health or Wellness Spending Accounts and medical, dental, and vision coverage for you and your dependents.
• Hybrid work environment: We value meaningful collaboration and connection at our Toronto office three days per week, with lunch, snacks, and beverages on us.
• Top-tier equipment: As a Mac-first company, our Toronto offices have everything you need to produce your best work comfortably, from multiple screens to ergonomic seating.
• Flexible vacation and time off: Every team member starts with 15 vacation days and 5 flex days to use as needed, plus an extra week of office closure during the end-of-year holidays.
• Dog-friendly space: Can dogs really make you happy and healthy? We don’t know for sure, but since we don’t want to chance it, our office is 100% floof-friendly.
• Award-winning workplace: As a winner of CB Insights’ Fintech 100, Deloitte Canada’s Technology Fast 50, Forbes Fintech 50, and the CIX Top 10 Growth Award, Relay is a recognized innovative and high-growth company.

Qualifications and Requirements

• You have used tools across the security stack, from SIEM, IPS, WAF and EDR to vulnerability scanners and security automation platformsYou can explain a technical finding to someone who isn’t in security without losing them
• You have hands-on experience with adversary simulation, detection engineering, penetration testing, incident response, or vulnerability management
• You can script (Python, Bash, PowerShell, JavaScript, etc.) well enough to automate a task, pull apart data, or build a small tool, and you’re comfortable getting better at it
• You’re motivated by closing the loop.
• You don’t just want to identify vulnerabilities, you want to see them fixed
• You have a solid grasp of security fundamentals: how systems get attacked, how they get defended, and why.
• You may have gone deep on one side and be eager to learn the other
• You’re comfortable working in cloud and developer environments (AWS, GCP, or Azure; GitHub, CI/CD) and can find your way around them
• You thrive in fast paced environments and embrace change
• You understand authentication and access protocols (SSO, OAuth, SAML, OpenID Connect) or have worked with zero trust principles
• You have roughly 2-4 years of experience in security, or in an adjacent technical role (IT, infrastructure, software engineering, SOC) with meaningful security exposure
• You’re curious, pragmatic, and collaborative; you ask questions early, you say when you’re stuck, and exploring new threats gives you energy
• You’re encouraged to apply even if your experience doesn’t perfectly match the job description — your perspective and drive matter more
• You have experience with cloud IAM, networking, or containerized systems like Docker or Kubernetes
• You have public security contributions, CTF participation, a home lab, bug bounties, talks, research, or OSS tooling
• You have participated in purple, red, or blue team rituals
• You have experience in fintech, SaaS, or scaling tech companies