Senior Application Security Engineer

📋 Description

• Security by design: protect Pennylane's app and infra.
• Collaborate with Product to embed security from design to delivery.
• Secure Rails and ReactJS app: dependencies, code, infra, config.
• Perform code reviews from a secure development perspective.
• Identify vulnerabilities and propose patches.
• Strengthen CI/CD security and AWS/EKS security.

🎯 Requirements

• Offensive security assessments on apps and infrastructure.
• Exploit and fix web vulnerabilities; explain to non-technical people.
• Experience in Ruby, Python or JavaScript for scripting or projects.
• Cloud infrastructure security experience.
• Translate technical terms to promote security adoption.
• Fluent in French and/or English (writing and speaking).

🎁 Benefits

• 25 vacation days paid by Pennylane
• Competitive compensation package
• Company shares
• Home office budget + coworking space allowance
• Gymlib access to 8000 spaces in Europe
• Latest Apple equipment provided