Senior Application Security Engineer

The role

The Senior Application Security Engineer will handle technical security matters, support ISO 27001 compliance, and advise employees on security best practices. You will ensure the security of the application and infrastructure through code reviews, vulnerability management, and cloud security.

What you will do

• Ensure the security of the application and infrastructure
• Integrate security in features from design to delivery
• Ensure the security of the main Web application, its dependencies, code, infrastructure and configuration
• Conduct code reviews from a secure development point of view
• Detect vulnerability and propose associated patches
• Raise the security level of the CI/CD configuration
• Secure the AWS infrastructure and Kubernetes environment
• Conduct regular security assessments on applications and infrastructure
• Strengthen means of detecting malicious attempts
• Investigate security incidents, block attacks, and propose corrective measures

Required qualifications

• Able to perform offensive security assessments on an infrastructure and an application
• Know how to exploit and fix a wide range of Web vulnerabilities
• Experience in a programming language (Ruby, Python, JavaScript)
• Experience in cloud infrastructure security
• Able to popularize technical terms
• Fluent in French and/or English
• Humble
• Team player
• Proactive and organized
• Quick learner
• Speak English
• Energized by an ever-shifting work environment

Nice to have

• Able to explain vulnerabilities to non-technical persons

Benefits

• 25 vacations days paid
• Competitive compensation package
• Company shares
• Budget to turn home into a comfortable workspace
• Monthly allowance to work from a coworking space
• Access to 8000 fitness spaces in Europe and more than 300 activities through Gymlib
• Latest Apple equipment
• Company events such as Tech Days and annual company seminar
• 6 to 12 RTT (if based in France)
• 5 weeks PTOs (if based in France)
• Lunch credits (Swile) (if based in France)
• Alan Blue healthcare cover (if based in France)

Before you apply

• Must be based in Europe within a maximum time difference of two hours from the CET time zone
• Recruitment process includes a 48h technical challenge

About the company

Pennylane is a fast growing Fintech in France providing accounting and financial software for small businesses and accountants. It aims to become the most beloved financial Operating System of French SMEs and Accounting Firms.