Senior Application Security Engineer II
RelayBusiness Banking company
Toronto, Canada$180,000 - $220,000 CADSenior
Bain Capital Ventures
Better Tomorrow Ventures
Garage Capital
Tapestry
Industry Ventures
Entrée Capital
Software Engineering
About the role
TL;DR
Senior Application Security Engineer II to ensure application security and fix vulnerabilities.
- •Relay is seeking a Senior Application Security Engineer II to join their team.
- •You will be responsible for ensuring the security of applications across the stack, from design to deployment, and will work autonomously to identify and fix vulnerabilities.
- •Key Responsibilities Threat model technical design documents and perform white-box penetration tests.
- •Triage researcher reports for VDP and bug bounty programs.
- •Contribute directly to the codebase to fix identified vulnerabilities.
- •Work with and extend security tooling like Datadog security, secrets scanning, and Burp Suite.
- •Enforce software supply chain security measures, including SBOMs and dependency verification.
- •Requirements 5 to 6 years of professional security experience in application security, penetration testing, or product security engineering.
- •Experience shipping production code and ability to read and fix unfamiliar codebases.
- •Deep understanding of OWASP Top 10 and real-world exploitation/mitigation techniques.
- •Experience building with and using AI tooling in daily work.
- •Clear communication and collaboration skills, with a sense of ownership and ability to mentor others.
Required skills
Penetration TestingOWASPTypeScriptNode.jsPostgreSQLAWSDatadogPythonBashGit
Nice-to-have skills
LLMs
Domain expertise
fintech
Tech stack
TypeScriptNode.jsPostgreSQLAWSDatadogPythonBashOWASPGit
