Senior Application Security Engineer
New
P
PennylaneFintech
All France (remote), Secondary Locations: Portugal (remote), Germany (remote), Italy, Spain (remote), United Kingdom (remote). Work remotely from your country of residence, as long as it is in Europe and within a maximum time difference of two hours from the CET time zone, Within a maximum time difference of two hours from the CET time zone.Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Fluent in French and/or English (both oral and written).
- Required Skills
- AWSPythonJavascriptKubernetesRubyRuby on RailsReact
Requirements
- Ability to perform offensive security assessments on infrastructure and applications.
- Proficiency in exploiting and fixing a wide range of Web vulnerabilities beyond OWASP top 10.
- Experience in at least one programming language: Ruby, Python, or JavaScript.
- Proven experience in cloud infrastructure security.
- Fluency in French and/or English (oral and written).
- Ability to explain technical security terms to non-technical stakeholders.
- Proactive, organized, and humble mindset with strong team collaboration skills.
- Willingness to learn and manage diverse projects (AppSec, cloud, training, compliance).
- Capable of prioritizing business-led actions in day-to-day work.
Responsibilities
- Ensure security of application and infrastructure by engaging with Product Teams during design and delivery.
- Secure the main Web application written in Ruby on Rails and ReactJS including code, dependencies, and infrastructure.
- Conduct secure code reviews (supporting ~80 releases per day) and propose vulnerability patches.
- Collaborate with DevOps to secure AWS infrastructure and Kubernetes (AWS EKS).
- Conduct security assessments, including pentests, bug bounties, and infrastructure reviews.
- Manage security incidents, investigate logs, and block attacks.
- Support ISO 27001 compliance by auditing processes and training developers.
- Develop and deliver secure coding training and promote the Security Champions program.
View Full Description & ApplyYou'll be redirected to the employer's site
