Senior Application Security Engineer
Core
Ensure the security of Pennylane's application and infrastructure, integrate security into features from design to delivery, and manage vulnerability detection and resolution for a financial OS serving French SMEs.
Role type
Senior Application Security Engineer (IC)
Builds
Secure web applications (Ruby on Rails, ReactJS) and AWS/Kubernetes infrastructure for a fintech platform
Domain
Fintech, Cloud Security, Application Security
Required skills
Offensive security assessments, Web vulnerability exploitation and remediation, Programming (Ruby, Python, JavaScript), Cloud infrastructure security, Secure code reviews, CI/CD security hardening
Preferred skills
ISO 27001 compliance knowledge, Security training and awareness program management, Penetration testing, Bug bounty management
Technologies
Ruby on Rails, ReactJS, AWS, Kubernetes, EKS
Responsibilities
Conduct code reviews from a secure development point of view; Detect vulnerabilities and propose patches; Secure AWS infrastructure including Kubernetes environment; Perform regular security assessments (code reviews, pentests, bug bounty); Investigate security incidents and propose corrective measures; Ensure compliance with ISO 27001 controls and train developers; Engage with Product Team to integrate security in features from design to delivery.
Seniority
Senior, hands-on IC
