Senior Application Security Engineer

🕒 May 22

🌐 France, Portugal, +4 more countries – Remote

🇫🇷 France – Remote 🇵🇹 Portugal – Remote 🇩🇪 Germany – Remote 🇮🇹 Italy – Remote 🇪🇸 Spain – Remote 🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 75%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Pennylane

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

💸 Finance

🏢 Enterprise

Finance • Enterprise

Pennylane is a company that provides financial and accounting services. It serves businesses by integrating financial management tools and offering a comprehensive platform that combines financial data and accounting services to streamline business operations.

📋 Description

• Integrate security into product features from design through delivery • Secure Pennylane’s Ruby on Rails and ReactJS web application, including dependencies, code, infrastructure, and configuration • Conduct secure-development code reviews across approximately 80 releases per day • Detect vulnerabilities and propose patches • Improve CI/CD security • Secure AWS infrastructure and its Kubernetes environment using AWS EKS with the DevOps team • Conduct regular security assessments, including code reviews, penetration tests, and bug bounty activities • Strengthen detection of malicious attempts • Participate in security incidents, investigate logs, block attacks, and propose corrective measures • Ensure development-related ISO 27001 compliance • Train developers, monitor projects, conduct internal audits, and manage technical non-conformities • Build and improve secure-development training materials • Run developer training sessions and support the Security Champions program • Improve company-wide security awareness • Contribute technical security details to tenders

🎯 Requirements

• Able to perform offensive security assessments on infrastructure and applications • Ability to exploit and fix a wide range of web vulnerabilities, beyond the OWASP Top 10 • Experience with Ruby, Python, or JavaScript for scripting or larger projects • Experience in cloud infrastructure security • Fluent in French and/or English, both oral and written • English fluency required for the application process • Right to work in France; visa sponsorship is not available • Ability to prioritize business-led actions • Ability to work with remote colleagues • Proactive, organized, humble, collaborative, and quick to learn

🏖️ Benefits

• 25 paid vacation days • Company shares • Home workspace budget • Monthly coworking-space allowance • Gymlib access to 8000 fitness spaces in Europe and more than 300 wellness activities • Latest Apple equipment • Remote work from country of residence in Europe, within a maximum two-hour difference from CET • Company events, including quarterly Tech Days and annual company seminar • For France-based employees: French contract under French regulation • For France-based employees: 6 to 12 RTT • For France-based employees: 5 weeks PTOs • For France-based employees: Lunch credits (Swile) • For France-based employees: Alan Blue healthcare cover • For France-based employees: Regular events in Lyon, Bordeaux, Nantes and other cities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume