Senior Security Engineer, Relay

• You have 5+ years of experience in security engineering, incident response, penetration testing, or a similar field
• You’ve operated across both offensive and defensive security domains, with hands-on experience in activities like adversary simulation, detection engineering, or vulnerability management
• You have strong familiarity with securing developer environments from GitHub and CI/CD pipelines to managing risks in package ecosystems
• You understand authentication and access protocols (SSO, OAuth, SAML, OpenID Connect) and are comfortable applying zero trust principles
• You’ve worked with cloud environments (AWS, GCP, or Azure) and have experience addressing security gaps in IAM, networking, and containerized systems like Docker or Kubernetes
• You bring scripting or programming skills (Python, Bash, PowerShell, JavaScript, etc.) to automate tasks, build tools, or run simulations
• You’ve worked with or are comfortable adopting tools across the security stack, from SIEM and EDR to vulnerability scanners and security automation platforms
• You’re motivated by closing the loop, you don’t just identify vulnerabilities, you want to see them fixed
• You’re curious, pragmatic, and collaborative. Exploring new threats gives you energy as you apply your learnings, and partner across the company to make Relay stronger

Desirable

• Relay is entering an exciting new chapter of growth, and we’re looking for a Senior Security Engineer (Purple Team) to join our Trust organization
• This is an opportunity to help shape Relay’s security posture from the ground up, blending offensive and defensive approaches to keep our systems, people, and customers safe
• As a Senior Security Engineer on Relay’s new purple team, you’ll design and run exercises that test our defences, surface vulnerabilities, and drive real improvements. You won’t just report problems, you’ll be instrumental in delivering solutions
• Plan and run security related simulations and translate outcomes into a security awareness program
• Refactor how sensitive customer and financial data is accessed and gated in Relay’s admin dashboards
• Strengthen security for our developer environments, including tooling, packages, and access to production
• Partner with engineering, IT, and business teams to turn test findings into tangible security improvements
• Track and explore emerging threats (e.g. AI misuse, supply chain risks, identity and access challenges, ShadowIT) and solve them in Relay’s context
• Influence security culture by communicating results in a way that educates, aligns, and drives action

• Stage 1: A 45-minute Google Meet call with a member of the People team
• Stage 2: A 1-hour experience deep dive interview with the Hiring Manager
• Stage 3: A 45-minute Google Meet leadership interview with a member of Relay’s executive team
• Stage 4: A 1-hour live technical assessment via Google Meet, or in person, with a panel of interviewers (technical leaders & stakeholders)