Security Engineer (Purple Team)

About the role

Relay is building a collaborative money‑management platform for small‑business owners and needs a Security Engineer to join its purple team. You will work across offensive and defensive security, designing simulations, surfacing vulnerabilities, and driving real improvements.

Key responsibilities

• Help plan and run security simulations and contribute to the security awareness program.
• Review access to sensitive customer and financial data in admin dashboards and implement improvements.
• Strengthen security for developer environments, tooling, packages, and production access.
• Collaborate with delivery, IT, and business teams to turn test findings into tangible fixes.
• Develop and manage cyber‑awareness exercises, including internal phishing attacks.
• Research emerging threats such as AI misuse, supply‑chain risks, identity challenges, and Shadow IT.

Required profile

• 2–4 years of experience in security or a related technical role with meaningful security exposure.
• Solid grasp of security fundamentals, including how systems are attacked and defended.
• Ability to script (Python, Bash, PowerShell, JavaScript) to automate tasks or build small tools.
• Comfortable working in cloud and developer environments (AWS, GCP, Azure, GitHub, CI/CD).
• Motivated to close the loop by seeing vulnerabilities fixed.
• Strong communication skills to explain technical findings to non‑security audiences.

Required skills

• Python
• Bash
• PowerShell
• JavaScript
• AWS, GCP, Azure
• GitHub, CI/CD pipelines
• SIEM, IPS, WAF, EDR
• Vulnerability scanners and security automation platforms
• Cloud IAM, networking, Docker, Kubernetes
• SSO, OAuth, SAML, OpenID Connect, zero‑trust principles
• Adversary simulation, detection engineering, penetration testing, incident response, vulnerability management