Latest AI JobsBrowse Jobs
Relay logo

Senior Application Security Engineer II

RelayToronto, ONEngineering
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Posted
11 Aug 2026
Status
Open · checked 7d ago

About this role

Relay is hiring a Senior Application Security Engineer II for a full-time, remote position based out of Toronto, ON. This role suits an autonomous security professional with about six years of experience who wants to shape modern application security practices in a digital banking environment.

Role Overview

The Application Security team at Relay operates beyond the traditional advisory model, embedding security directly into the engineering stack. Professionals in this role handle everything from design to deployment across TypeScript, Node.js, Postgres, and AWS cloud infrastructure. The mission is to take ownership of at least one end-to-end AppSec process, guide developers through complex security challenges, and adapt traditional solutions to modern AI workflows.

Key Responsibilities

Perform threat modeling on technical design documents and run white-box penetration tests in testing environments to uncover vulnerabilities.
Triage vulnerability disclosure program and bug bounty reports, assess real-world impact, coordinate fixes, and implement durable controls.
Contribute directly to the codebase by writing code patches rather than simply filing tickets.
Utilize and extend security tooling such as Datadog, secrets scanning, Burp Suite, and proprietary internal tools.
Integrate AI tooling like Claude Code and Cursor into daily security operations by default.
Manage software supply chain security through SBOM generation, dependency pinning, private registries, and runtime software composition analysis detections.
Participate in team rhythms, including biweekly security champions sessions with product engineers and weekly Hack The Box sessions.

Requirements

Bring approximately 5 to 6 years of professional security experience in application security, penetration testing, product security engineering, or related fields.
Experience shipping production-level software and reading unfamiliar codebases well enough to implement direct fixes.
A deep understanding of the OWASP Top 10 and real-world exploitation and mitigation techniques.
Demonstrated experience building and working with AI tooling in a daily workflow.
Strong communication and collaboration skills to partner effectively with product developers.
A high sense of ownership, responsibility, and mentorship capabilities for team members and peers.

Skills and Tools

AWS
Node.js
TypeScript
Datadog
Burp Suite
Claude Code and Cursor AI tools

Salary and Benefits

The annual salary range for this role is $180,000 CAD to $220,000 CAD.
The typical starting salary is $200,000 CAD for candidates who demonstrate full readiness for the scope of the role.
Offers below the starting point reflect candidates who can grow into the role with support, while offers above reflect impact that exceeds expectations or expanded initial scope.

About the Company

Relay is a digital banking platform designed to help self-made business owners manage money with clarity, confidence, and control. By replacing financial guesswork with real visibility, Relay transforms cash flow into a clear signal for running stronger, more resilient businesses.

How to Apply

To apply for this position, please visit the official Relay careers page and submit your application online.

Skills and tech stack

Questions candidates ask

What is the location of the Senior Application Security Engineer II role?

The role is based in Toronto, ON, with remote work flexibility available.

What is the salary range for this position?

The annual salary range is $180,000 CAD to $220,000 CAD, with a typical starting salary of $200,000 CAD for fully ready candidates.

How many years of experience are required?

Candidates should have approximately 5 to 6 years of professional security experience in fields like application security, penetration testing, or product security engineering.

What technical skills and tools are utilized in this role?

The tech stack includes AWS, Node.js, TypeScript, Postgres, Datadog security, Burp Suite, and AI tools like Claude Code and Cursor.

What does the interview process consist of?

The interview process includes a 60-minute video call with the hiring manager, a 60-minute live team session, a 60-minute secure code review and coaching session with the Customer Experience team, and a 45-minute video call with leadership.

Ready to apply?

The application is on the official Relay careers page.

Apply on company site