Senior Application Security Engineer
Pennylane SAS1 day ago
Remote, United Kingdom +4 moreSenior
Responsibilities
- Integrate security into product features from design through delivery.
- Secure the Ruby on Rails and ReactJS web application, including dependencies, code, infrastructure, and configuration.
- Conduct secure code reviews, detect vulnerabilities, and propose patches.
- Improve the security of the CI/CD configuration and AWS infrastructure in collaboration with DevOps.
- Conduct application and infrastructure security assessments, including code reviews, penetration tests, and bug bounty activities.
- Investigate security incidents, analyze logs, block attacks, and propose preventive corrective measures.
- Support ISO 27001 development-related controls, internal audits, patch management, vulnerability management, and technical non-conformity management.
- Create secure development training materials, train developers, support the Security Champions program, and improve company-wide security awareness.
- Contribute technical security information to tenders and explain company security policies.
Requirements
- Experience performing offensive security assessments on infrastructure and applications.
- Ability to exploit and remediate a broad range of web vulnerabilities beyond the OWASP Top 10.
- Experience programming in Ruby, Python, or JavaScript for scripting or larger projects.
- Experience with cloud infrastructure security.
- Ability to explain technical security concepts to non-technical audiences and encourage adoption of security measures.
- Fluency in French and/or English, both written and spoken.
- Proactive, organized, collaborative, humble, adaptable, and comfortable working with remote colleagues.
Benefits
- 25 paid vacation days.
- Competitive compensation package and company shares.
- Home-office equipment budget and monthly coworking-space allowance.
- Access to 8,000 fitness spaces and more than 300 wellness activities through Gymlib.
- Latest Apple equipment.
- Remote work from the employee’s European country of residence, within a maximum two-hour time difference from CET, depending on team and role requirements.
- Regular company events, including quarterly Tech Days and an annual company seminar.
- Employees based in France receive a French contract, 6 to 12 RTT, 5 weeks of paid time off, lunch credits through Swile, Alan Blue healthcare coverage, and local events.
Tech Stack
Categories
About Pennylane SAS
Pennylane SAS builds a financial operating system for European SMEs and their accountants, combining invoicing, bill payments, expense management, cashflow insights, and bookkeeping workflows. Offered as a SaaS platform, it centralizes accounting data for business owners while enabling accountants to handle bookkeeping and tax filings. Founded in 2020 and headquartered in Paris, the privately held company launched in France and is expanding across continental Europe.