Senior Security Operations Specialist

Relay is a digital banking platform that gives self‑made business owners the tools and know-how to be great with money—bringing clarity, confidence, and control to every dollar earned, so they can turn hard work into lasting success. We do this by replacing financial guesswork with real visibility, transforming cash flow from a constant source of stress into a clear signal owners can use to run stronger, more resilient businesses.

Relay is building a best‑in‑class, in‑house Security Operations function to protect our customers, platform, and business as we scale. As a Sec Ops team member, you’ll be on the front line of detecting, investigating, and containing real security threats in real time, turning signals into action and incidents into lasting improvements.

• Monitor, triage, and investigate high‑severity security alerts across cloud infrastructure, identity, SaaS, endpoints, and production systems
• Validate threats versus noise and determine severity and impact
• Execute containment actions and coordinate response across teams
• Act as Incident Commander or deputy during security incidents
• Build and maintain investigation runbooks and response playbooks
• Work horizontally across Risk, App Sec, Engineering, Product, and business teams to ensure security findings lead to meaningful improvements in systems, practices, and outcomes.
• Contribute to SOAR automation and alert enrichment
• Produce high‑quality incident documentation and post‑incident remediation
• Design and implement advanced threat detection logic using SIEM/XDR telemetry.
• Perform threat hunting engagements to proactively detect stealthy adversaries.
• Ensure security compliance and regulatory alignment:
  Partner with Compliance, Security, and Risk teams to implement and enforce security controls, standards, and policies across systems and services.

• 5+ years in security operations, incident response, or related cybersecurity roles.
• Strong cloud security and identity security experience (AWS preferred).
• Comfortable making structured, high‑impact decisions during active incidents.
• Deep knowledge of common attack techniques, adversary TTPs (MITRE ATT&CK, etc.), and fraud/ATO patterns.
• Strong written and verbal communication skills — able to explain complex technical issues to both technical and business audiences.
• Ownership mindset with a bias toward action and continuous improvement.
• Skilled in building detection logic and workflows for cloud‑native environments and security tooling.
• Experience with SOAR platforms and building/optimizing automated response playbooks.
• Ability to communicate complex security issues clearly to both technical and business stakeholders.

• Fintech or regulated environment experience
• Fraud/ATO tooling familiarity
• Purple Team or detection engineering exposure
• AI system monitoring or abuse detection experience

Stage 1: A 30‑minute Google Meets video call with a member of the Talent Team

Stage 2: A 45‑minute Google Meets technical interview with the Sec Ops Manager

Stage 3: A 45‑minute meeting with a member of the leadership team

Stage 4: A 60‑minute case study presentation with members of the Security team and the Sec Ops Manager

We believe Relayers should feel rewarded for the impact they have on our mission and growth. Compensation follows impact. As impact increases, compensation grows, and we do not limit compensation changes to a once‑a‑year review cycle.

The annual salary range for this role is $126,000 - $154,000 CAD.

For candidates who demonstrate full readiness for the defined scope of the role, the typical starting salary is $140,000 CAD. Offers below this point reflect candidates we believe can grow into the full scope of the role with support and development. Offers above this point reflect impact that meaningfully exceeds the role’s defined expectations or an expanded scope from day one.

We encourage you to have a conversation with your recruiter and ask questions about compensation throughout the hiring process. For more information on our compensation philosophy and perks and benefits, visit our Candidate Hub.