Senior AppSec Engineer II - Autonomy & AI-Driven Security

Doist; Toronto; On-site; CAD 180,000 - 220,000; Full time

Job summary

Relay is a digital banking platform that gives self-made business owners the tools and know-how to be great with money. We are seeking a Senior Application Security Engineer II who thrives on autonomy, curiosity, and impact, to own testing across our stack—from TypeScript and Node.js to Postgres and AWS—helping secure from design to deployment.

You will work with senior engineers, test and fix security gaps end to end, mentor teammates, and help build guardrails, automation, and AI-enabled

Qualifications

• 5–6 years of professional security experience (application security, pentesting, or product security engineering).
• Deep understanding of OWASP Top 10 and real-world exploitation/mitigation techniques.
• Experience shipping production code and reading unfamiliar codebases to fix issues.

Responsibilities

• Threat modeling and offensive testing on our environment to identify vulnerabilities.
• Triage researcher reports, reproduce/assess impact, coordinate fixes with owners, and communicate clearly.

Skills

Threat modeling

Penetration testing

OWASP Top 10

Code security reviews

AI tooling in security

Collaboration with developers

Tools

Burp Suite

Datadog

Secrets scanning tools

Job description

Relay is a digital banking platform that gives self-made business owners the tools and know-how to be great with money. We are seeking a Senior Application Security Engineer II who thrives on autonomy, curiosity, and impact, to own testing across our stack—from TypeScript and Node.js to Postgres and AWS—helping secure from design to deployment.

You will work with senior engineers, test and fix security gaps end to end, mentor teammates, and help build guardrails, automation, and AI-enabled