Senior Security Engineer (Purple Team)
Ready to level up small business finance? At Relay, we're building the all-in-one money management platform that empowers small businesses to thrive. We're not just another fintech company; we're disrupting traditional banking and putting SMBs "on the money." Join our Trust organization and play a pivotal role in shaping Relay's security from the ground up!
We're seeking a passionate and experienced Senior Security Engineer to join our new Purple Team. This isn't just a job; it's a chance to blend offensive and defensive strategies, proactively identify vulnerabilities, and build robust security solutions that protect our systems, people, and customers.
As a key member of our Purple Team, you'll design and execute realistic attack simulations, analyze their outcomes, and collaborate with engineering, IT, and business teams to implement lasting security improvements. You'll be more than just a reporter; you'll be a driver of impactful change.
What You'll Do:
Orchestrate Purple Team Exercises: Design and execute security simulations, transforming findings into actionable security awareness programs.
Fortify Data Access: Refactor how sensitive customer and financial data is accessed and secured within Relay's admin dashboards.
Harden Developer Environments: Strengthen security for our development infrastructure, including tooling, packages, and production access controls.
Drive Security Improvements: Partner cross-functionally to translate test results into tangible security enhancements.
Threat Intelligence & Mitigation: Track and analyze emerging threats (e.g., AI misuse, supply chain risks, identity and access challenges, Shadow IT) and proactively develop solutions tailored to Relay's context.
Champion Security Culture: Communicate findings in a clear, engaging way that educates, aligns stakeholders, and drives action.
What You'll Bring:
Experience: 5+ years in security engineering, incident response, penetration testing, or a related field.
Offensive & Defensive Expertise: Hands-on experience across both offensive and defensive security, including adversary simulation, detection engineering, and vulnerability management.
DevSecOps Acumen: Deep understanding of securing developer environments, from GitHub and CI/CD pipelines to managing risks in package ecosystems.
Authentication & Access Mastery: Solid grasp of authentication and access protocols (SSO, OAuth, SAML, OpenID Connect) and a passion for applying zero-trust principles.
Cloud Security Prowess: Experience securing cloud environments (AWS, GCP, or Azure), with expertise in IAM, networking, and containerized systems (Docker, Kubernetes).
Automation Skills: Proficiency in scripting or programming (Python, Bash, PowerShell, JavaScript, etc.) to automate tasks, build tools, and run simulations.
Security Tooling Familiarity: Experience with tools across the security stack, including SIEM, EDR, vulnerability scanners, and security automation platforms.
Results-Oriented Mindset: A passion for closing the loop – identifying vulnerabilities and seeing them through to remediation.
Collaborative Spirit: A curious, pragmatic, and collaborative approach to security.
Bonus Points:
Prior experience designing or executing purple (Red or Blue) team exercises.
Experience working in fintech, SaaS, or rapidly scaling tech companies.
Public security contributions (bug bounties, talks, research, OSS tooling).
The Interview Process:
Stage 1: Initial chat (45 minutes) with our People team.
Stage 2: Deep dive (1 hour) with the Hiring Manager.
Stage 3: Executive interview (45 minutes) with a member of Relay's leadership team.
Stage 4: Technical assessment (1 hour) – a live, hands-on evaluation with technical leaders and stakeholders (via Google Meet or in-person).
Relay's Commitment to You:
Competitive Compensation: Competitive salary and meaningful equity.
Comprehensive Benefits: Full health benefits from day one, including flexible Health or Wellness Spending Accounts and comprehensive medical, dental, and vision coverage.
Generous Time Off: 15 vacation days and 5 flex days annually, plus an extra week of office closure during the end-of-year holidays.
Parental Leave: 12 weeks of fully paid parental leave for all full-time employees.
Hybrid Work Environment: Meaningful collaboration and connection at our Toronto office 3 days a week (lunch, snacks, and beverages provided!).
Dog-Friendly Office: Bring your furry friend to work!
Growth & Development: Ongoing feedback, mentorship, and coaching to support your personal and professional growth.
Top-Tier Equipment: As a Mac-first company, we provide everything you need to do your best work, from multiple screens to ergonomic seating.
Social Connection: Two annual company-wide get-togethers, quarterly team events, happy hours, and special networking opportunities.
Why Relay Might Be Your Dream Job:
You're a Change Agent: You relentlessly push for reinvention and embrace change.
You Thrive on Autonomy: You take initiative, embrace risks, and seek input when needed.
You Own Your Work: You're accountable for outcomes, not just tasks.
You Seek Growth: You treat comfort as a red flag and lean into new challenges.
You Value Impact: You measure success by results, not recognition.
You're Energized by Complexity: You enjoy tackling ambiguous problems and building from scratch.
You Seek Feedback: You embrace directness and see feedback as a tool for growth.
You're Mission-Driven: You're passionate about helping small businesses thrive.
Our Promise:
At Relay, you'll find the confidence to take chances, the trust to take initiative, and the support you need to build a career you love. We empower you to make big decisions, ask tough questions, and take risks that result in work we're all proud of. We give you the baton – you run the Relay.
Join Us!
Research shows that women-identifying and other marginalized individuals often apply only if they meet 100% of the qualifications. But no one is a perfect match on paper. If this role excites you, we encourage you to apply. Let's figure out together if it's a great fit.
Relay is an equal opportunity employer committed to building a diverse and inclusive workplace. We welcome applicants of all backgrounds, perspectives, and skills.
We provide accommodations at any stage of the hiring process. If you require accommodations during your interview, please email your Talent Partner.