Senior Application Security Engineer
Core
Ensure the security of Pennylane's application and infrastructure, support ISO 27001 compliance, and advise developers on security best practices.
Role type
Senior Application Security Engineer
Builds
Secure web applications (Ruby on Rails, ReactJS), AWS/Kubernetes infrastructure, and secure CI/CD pipelines for a financial OS serving French SMEs.
Domain
Fintech, Application Security, Cloud Infrastructure
Required skills
Offensive security assessments, Web vulnerability exploitation and remediation, Programming (Ruby, Python, JavaScript), Cloud infrastructure security, Secure code review, Security incident response
Preferred skills
ISO 27001 compliance expertise, Security Champions program management, Training material development
Technologies
Ruby on Rails, ReactJS, AWS, Kubernetes (EKS), CI/CD
Responsibilities
Integrate security into product features from design to delivery, Conduct code reviews for secure development, Detect vulnerabilities and propose patches, Secure AWS infrastructure and Kubernetes environment, Perform regular security assessments (pentests, bug bounty), Investigate security incidents and propose corrective measures, Ensure ISO 27001 compliance through training and audits
Seniority
Senior, hands-on IC
