About the Role
Relay is a digital banking platform designed to empower self-made business owners with financial clarity, confidence, and control. We are seeking an Application Security Engineer II to join our team, focusing on ensuring application security from design to deployment across our technology stack, including TypeScript, Node.js, Postgres, and AWS cloud infrastructure. This role involves identifying risks, building security guardrails, and evolving security practices as Relay scales. A key mission is to test and secure the platform, identifying and fixing exploitable vulnerabilities.
Responsibilities
- Threat model technical design documents (TDDs) and run white-box penetration tests.
- Triage researcher reports, reproduce/assess impact, and coordinate fixes.
- Contribute directly to Relay’s codebase by writing patches.
- Modify and extend security tooling, including Datadog security, secrets scanning and logging, Burp Suite, and in-house tools.
- Utilize AI tooling such as Claude Code and Cursor in daily work.
- Participate in team rhythms including standups, security champions sessions, and Hack The Box sessions.
- Enforce software supply chain security, including SBOM on every build, dependency pinning/owner verification, private registries/proxies, and runtime SCA detections.
Requirements
- 2 to 4 years of professional security experience in Application Security, Penetration Testing, or Product Security Engineering.
- Experience shipping production code and ability to read and fix unfamiliar codebases.
- Deep understanding of OWASP Top 10 and real-world exploitation/mitigation techniques.
- Experience using AI tooling in daily work and building with AI.
- Clear communication and collaboration skills, with a focus on partnering with developers.
- Strong sense of ownership and responsibility for problems.
- Comfortable mentoring team members and others on security best practices.
Skills
- Application Security
- Penetration Testing
- Product Security Engineering
- TypeScript
- Node.js
- Postgres
- AWS
- Threat Modeling
- OWASP Top 10
- AI Tooling
- Secure Code Review
- Software Supply Chain Security
- SBOM
- Dependency Management
- Secrets Scanning
- Logging
- Datadog Security
- Burp Suite
Location
- Remote
Work Type
- Full-time
Experience Level
- Mid-level
Salary/Compensations
- $126,000 CAD to $154,000 CAD
- Typical starting salary: $140,000 CAD
Benefits
- Perks and benefits detailed on Candidate Hub
About the Company
- Relay is a digital banking platform that gives self-made business owners the tools and know-how to be great with money—bringing clarity, confidence, and control to every dollar earned, so they can turn hard work into lasting success.
- We do this by replacing financial guesswork with real visibility, transforming cash flow from a constant source of stress into a clear signal owners can use to run stronger, more resilient businesses.
- We encourage people who are relentless, curious, and care deeply about the work.
- We welcome diverse backgrounds and people who think critically, challenge the status quo, and want to help small businesses thrive.
Equal Opportunity
- If you require accommodations at any stage of the hiring process, please reach out to your Talent Partner.
- For compliance reasons, all offers of employment at Relay are conditional upon a successful background check and employment verification through Certn.
