Security Engineer

Relay is a digital banking platform that gives self-made business owners the tools and know-how to be great with money—bringing clarity, confidence, and control to every dollar earned, so they can turn hard work into lasting success. We do this by replacing financial guesswork with real visibility, transforming cash flow from a constant source of stress into a clear signal owners can use to run stronger, more resilient businesses.

Our mission is to increase the success rate of small businesses. Traditional banking has been a growth limiter rather than a growth enabler. We're changing that. Relay is the all-in-one, collaborative money management platform. We're building for employer SMBs and their finance function, and delivering a human-centric customer experience.

Relay is entering an exciting new chapter of growth, and we're looking for a Security Engineer to join the purple team in our security organization. This is a rare early-career opportunity to work across both offensive and defensive security with the mentorship and support to grow quickly.

As a Security Engineer on Relay's purple team, you'll help design and run exercises that test our defenses, surface vulnerabilities, and drive real improvements. You'll work closely with senior security engineers who will coach you through the harder problems, and you'll take increasing ownership of your own workstreams as you build depth.

• →

  Help plan and run security simulations, and contribute to the security awareness program that comes out of them

• →

  Review how sensitive customer and financial data is accessed in Relay's admin dashboards, and help implement improvements

• →

  Contribute to strengthening security for our developer environments, including tooling, packages, and access to production

• →

  Work alongside delivery, IT, and business teams to turn test findings into tangible fixes, and follow them through to done

• →

  Develop and manage Cyber Awareness exercises, including internal phishing attacks

• →

  Research emerging threats (e.g. AI misuse, supply chain risks, identity and access challenges, Shadow IT) and help the team figure out what they mean in Relay's context

• →

  Share what you find in a way that educates and drives action, building your voice in Relay's security culture

We're looking for people who are relentless, curious, and care deeply about the work. You're encouraged to apply even if your experience doesn't perfectly match the job description -- your perspective and drive matter more. We welcome diverse backgrounds and people who think critically, challenge the status quo, and want to help small businesses thrive.

If you require accommodations at any stage of the hiring process, please reach out to your Talent Partner.

Disclaimer: For compliance reasons, all offers of employment at Relay are conditional upon a successful background check and employment verification through Certn.

Important Notice: Relay’s recruitment team only contacts candidates and corresponds from official corporate email addresses ending in @relayfi.com. We will never ask for sensitive personal data (such as bank account details, credit card numbers, or social security/insurance numbers) during the initial application or interview stages.

• You have roughly 2–4 years of experience in security, or in an adjacent technical role (IT, infrastructure, software engineering, SOC) with meaningful security exposure

• You have a solid grasp of security fundamentals: how systems get attacked, how they get defended, and why. You may have gone deep on one side and be eager to learn the other

• You can script (Python, Bash, PowerShell, JavaScript, etc.) well enough to automate a task, pull apart data, or build a small tool, and you're comfortable getting better at it

• You're comfortable working in cloud and developer environments (AWS, GCP, or Azure; GitHub, CI/CD) and can find your way around them

• You're motivated by closing the loop. You don't just want to identify vulnerabilities, you want to see them fixed

• You're curious, pragmatic, and collaborative; you ask questions early, you say when you're stuck, and exploring new threats gives you energy

• You can explain a technical finding to someone who isn't in security without losing them

• You thrive in fast paced environments and embrace change

• You have hands-on experience with adversary simulation, detection engineering, penetration testing, incident response, or vulnerability management

• You understand authentication and access protocols (SSO, OAuth, SAML, OpenID Connect) or have worked with zero trust principles

• You have used tools across the security stack, from SIEM, IPS, WAF and EDR to vulnerability scanners and security automation platforms

• You have experience with cloud IAM, networking, or containerized systems like Docker or Kubernetes

• You have participated in purple, red, or blue team rituals

• You have experience in fintech, SaaS, or scaling tech companies

• You have public security contributions, CTF participation, a home lab, bug bounties, talks, research, or OSS tooling