Senior Application Security Engineer
Pennylane, one of France's fastest-growing FinTechs, is looking for a Senior Application Security Engineer to join Louis's 5-person technical security team. You will handle all technical security matters, support ISO 27001 compliance, and advise employees—especially developers—on security best practices. The team manages security issues from detection to resolution, working with developers and Security Champions.
Responsibilities
- ▹Ensure security by design across Pennylane's application and infrastructure, engaging Product teams from design to delivery
- ▹Secure the main web application (Ruby on Rails and ReactJS): its dependencies, code, infrastructure and configuration
- ▹Conduct code reviews from a secure development standpoint (about 80 releases per day) and propose patches for detected vulnerabilities
- ▹Raise the security level of the CI/CD configuration
- ▹With the DevOps team, secure the AWS infrastructure including its Kubernetes (AWS EKS) environment
- ▹Conduct regular security assessments (code reviews, pentests, bug bounty) internally or via external consultants
- ▹Strengthen the detection of malicious attempts
- ▹Be involved in all security incidents: investigate logs, block attacks and propose corrective measures
- ▹Ensure ISO 27001 compliance for development-related controls, train developers, run internal audits and manage tech non-conformities
- ▹Build and improve secure development training materials and run the Security Champions program
- ▹Improve security awareness across the company and contribute to tenders by explaining security policies and technical details
Requirements
- ▹Able to perform offensive security assessments on infrastructure and applications
- ▹Know how to exploit and fix a wide range of web vulnerabilities (beyond the OWASP Top 10) and explain them to non-technical people
- ▹Experience with a programming language (Ruby, Python, JavaScript) for quick scripting or larger projects
- ▹Experience in cloud infrastructure security
- ▹Able to popularize technical terms to facilitate the adoption of security measures
- ▹Fluent in French and/or English (both oral and written)
Soft skills
What we offer
- ▹25 vacation days wherever you are based
- ▹Competitive compensation package
- ▹Company shares
- ▹Budget for a comfortable home workspace plus a monthly coworking allowance
- ▹Access via Gymlib to 8,000 fitness spaces in Europe and over 300 wellness activities
- ▹The latest Apple equipment
- ▹Remote work from your European country of residence (max 2h from CET)
- ▹Company events: Tech Days every 3 months and an annual seminar
- ▹For France-based staff: 6 to 12 RTT days, 5 weeks PTO, Swile lunch credits and Alan Blue healthcare cover
About the company
Pennylane is one of France's fastest-growing FinTechs, offering groundbreaking accounting and financial software. Founded 5 years ago, it has raised 359 million euros (including from Sequoia), grown from 7 cofounders to 1,000 employees across more than 25 nationalities with a strong remote-friendly culture, and is used by more than 1,000,000 SMEs and over 6,000 accounting firms in France.