🛠 Tech Stack

💼 About This Role

You'll join a best-in-class Security Operations function protecting Relay's digital banking platform for small businesses. You'll be on the front line detecting, investigating, and containing real security threats in real time, turning signals into action and incidents into lasting improvements. This role offers autonomy and high impact in a fast-growing fintech environment.

🎯 What You'll Do

• Monitor and triage high-severity security alerts across cloud and production systems.
• Execute containment actions and coordinate incident response across teams.
• Maintain investigation runbooks and response playbooks.
• Design advanced threat detection logic using SIEM/XDR telemetry.

📋 Requirements

• 5+ years in security operations or incident response.
• Strong cloud security and identity security experience (AWS preferred).
• Deep knowledge of adversary TTPs (MITRE ATT&CK) and fraud/ATO patterns.
• Experience with SOAR platforms and building automated response playbooks.

✨ Nice to Have

• Fintech or regulated environment experience.
• Fraud/ATO tooling familiarity.
• Purple Team or detection engineering exposure.

🎁 Benefits & Perks

• 💰 Competitive salary with impact-driven compensation adjustments.
• 🏠 Hybrid work flexibility.
• 📈 Growth opportunities in a scaling company.

📨 Hiring Process

Stage 1: 30-min talent call, Stage 2: 45-min technical with SecOps Manager, Stage 3: 45-min leadership, Stage 4: 60-min case study presentation.