Application Security Engineer, Relay
CA$126-154k
For candidates who demonstrate full readiness for the defined scope of the role, the typical starting salary is $140,000 CAD
In office Tues/Weds/Thurs
3 days a week in office
Online business banking and money management
Be an early applicant
Online business banking and money management
201-500 employees
Be an early applicant
CA$126-154k
For candidates who demonstrate full readiness for the defined scope of the role, the typical starting salary is $140,000 CAD
In office Tues/Weds/Thurs
3 days a week in office
201-500 employees
Company mission
To help small businesses have greater financial clarity to build health, lasting businesses.
Role
Who you are
- We’re looking for an Application Security Engineer II who thrives on autonomy, curiosity, and impact
- You have 2 to 4 years of professional security experience. Application security, penetration testing, or product security engineering or similar roles
- You've shipped production code: Production-level software real users depended on. And you can read an unfamiliar codebase well enough to fix something in it, which is most of this job
- Security fundamentals: Deep understanding of OWASP Top 10 and real-world exploitation/mitigation techniques
- You build with AI. You use AI tooling in your daily work and you've built something with it. You can talk about where it gets things wrong, not just that it's fast
- Clear communicator & collaborator: you are a collaborator who loves to partner with developers to bring value to customers in the most secure way possible
- Ownership: You have a sense of responsibility towards problems and take ownership over them making sure nothing is forgotten and stakeholders stay informed
- Mentorship: You are comfortable mentoring team members and members of other teams on security best practices
- We're looking for people who are relentless, curious, and care deeply about the work. You're encouraged to apply even if your experience doesn't perfectly match the job description -- your perspective and drive matter more
What the job involves
- You'll join an Application Security team that is deliberately moving away from the advisory model most AppSec functions are stuck in. You’ll work across our stack (from TypeScript and Node.js, to Postgres and AWS cloud infrastructure) ensuring our applications are secure from design to deployment
- You’ll blend technical depth with systems thinking, working across teams to identify risks, build guardrails, and evolve our security practices as Relay scales
- That coverage number is where you come in. Right now, most of Relay's platform has never been properly tested — and closing that gap is the single highest-leverage thing our team can do this year
- Your mission is to own a defined slice of it end to end: testing the services in scope, working out what's actually exploitable, and fixing what you can yourself
- This is a role with room to grow. You'll be working next to senior engineers who are maintaining our auth system and building our DAST tooling from scratch. The Relay AppSec team genuinely enjoys Application Security and is looking to make an impact on the field
- Threat modeling & offensive testing: Threat model technical design documents (TDDs) and run white-box penetration tests on our testing environment to identify vulnerabilities from an attacker’s point of view
- VDP & bug bounty: Triage researcher reports, reproduce/assess impact, coordinate fixes with owners, and close the loop with clear comms and durable controls
- Shipping the fixes you can: Contributing directly to Relay’s code base when it makes sense — writing the patch, not filing the ticket
- Working in our security tooling and extending it: Datadog security, secrets scanning and logging, Burp Suite, and in-house tools you'll be expected to modify rather than just operate
- Building with AI as a default: Claude Code and Cursor are daily drivers on this team, not a pilot program
- Joining the team's rhythms: Two weekly standups, a biweekly security champions session with product engineers, and a weekly Hack The Box session
- Software supply chain: Enforce provenance: SBOM on every build, dependency pinning/owner verification, private registries/proxies, and runtime SCA detections
Application process
- Stage 1: A 60-minute Google Meet video call with the Hiring Manager
- Stage 2: A 60-minute live session with the team
- Stage 3: A 60-minute Secure Code Review and Coaching session with two members of our Customer Experience team
- Stage 4: A 45-minute Google Meet video call with a member of our leadership team
Our take
Traditional banking options can feel outdated and tedious, especially if this includes in-person visits and waiting in line. This has led to the rise of online banking - but lots of smaller companies have to navigate multiple complicated applications in order to manage this business banking.
This is what Relay aims to fix. It's no-fee, online banking and money management platform looks to tackle financial complexity for SMBs. The company's goal is to fully automate the finance function using banking that deeply integrates into back-office systems. And its software is designed to affordably increase financial clarity and security, reducing the time spent on administrative tasks.
Relay is focused on its long-term goals and plans to scale up distribution and grow in sales, marketing, customer support, operations, engineering and product. The company currently serves thousands of SMBs across the US with the goal to get 100,000 small businesses over the next few years.
Freddie
Company Specialist at Welcome to the Jungle
Insights
58% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
May 2026
$50m
GROWTH EQUITY VC
May 2024
$32.2m
SERIES B
Total funding: $101.7m
Company benefits
- Competitive salary and meaningful equity: Relay employees are Relay owners, complete with equity and a competitive salary. Since 2023, 66%+ of employees have received salary increases, with multiple new team members joining just last year.
- Social connection: We believe in celebrating our wins with two annual company-wide get-togethers, quarterly team events, happy hours, and special events and networking opportunities with industry leaders.
- Personal and professional growth: Through ongoing feedback, mentorship, and coaching, work with peers and leaders who are invested in your growth and success. Even with more than half of our team joining in the last 12 months, almost 20% have received promotions in the last year alone.
- Parental leave with top-up: We offer 12 weeks off with a 100% salary top-up for all full-time employees, regardless of location, and accessible for all parents: birthing, non-birthing, and adoptive
- Comprehensive health benefits: Enjoy full health benefits from day one: no probation period required. We offer flexible Health or Wellness Spending Accounts and medical, dental, and vision coverage for you and your dependents.
- Hybrid work environment: We value meaningful collaboration and connection at our Toronto office three days per week, with lunch, snacks, and beverages on us.
- Top-tier equipment: As a Mac-first company, our Toronto offices have everything you need to produce your best work comfortably, from multiple screens to ergonomic seating.
- Flexible vacation and time off: Every team member starts with 15 vacation days and 5 flex days to use as needed, plus an extra week of office closure during the end-of-year holidays.
- Dog-friendly space: Can dogs really make you happy and healthy? We don’t know for sure, but since we don’t want to chance it, our office is 100% floof-friendly.
- Award-winning workplace: As a winner of CB Insights' Fintech 100, Deloitte Canada's Technology Fast 50, Forbes Fintech 50, and the CIX Top 10 Growth Award, Relay is a recognized innovative and high-growth company.
Company HQ
St. Lawrence, Toronto, ON
Leadership
Yoseph West
(Co-Founder & CEO)Yoseph has a range of experience including serving as the CEO at Vuru, Director of Product Engagement at Wave, and Head of Marketing at Hubdoc.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 34 more jobs at Relay