Senior Application Security Engineer at pennylane

pennylane

All France (remote)·1w ago

SeniorFull-timeJavaScriptPythonJavaRustReactRailsAWSKubernetesCI/CD

Salary Range

$79,560 - $107,640 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for an Application Security Engineer to join Pennylane, a fast-growing fintech in France. This role focuses on ensuring the security of our applications and infrastructure, supporting ISO 27001 compliance, and advising employees on security best practices.

Key Responsibilities

→Ensure the security of Pennylane’s application and infrastructure
→Engage with the Product Team to integrate security in our features from design to delivery
→Ensure the security of the main Web application written in Ruby on Rails and ReactJS
→Conduct code reviews from a secure development point of view
→Detect vulnerabilities and propose associated patches
→Raise the security level of our CI/CD configuration
→Secure our AWS infrastructure, including its Kubernetes environment
→Conduct regular security assessments on applications and infrastructure
→Strengthen means of detecting malicious attempts
→Be involved in all security incidents, investigate logs, block attacks, and propose corrective measures
→Ensure compliance with ISO 27001 controls related to development
→Build and improve secure development training materials
→Improve security awareness throughout the company
→Contribute to tenders to explain our security policies

Requirements

✓Able to perform offensive security assessments on infrastructure and applications
✓Knowledge of exploiting and fixing a wide range of Web vulnerabilities
✓Experience in a programming language (Ruby, Python, JavaScript)
✓Experience in cloud infrastructure security
✓Ability to popularize technical terms to facilitate adoption of security measures
✓Fluent in French and/or English (both oral and written)
✓Humble, team player, proactive, organized, quick learner