RemoteLeaf Logo
Log in Sign up

Senior Application Security Engineer

6 months, 1 week ago
France, Spain, United Kingdom, Croatia, Italy, Poland, Portugal, Romania, Germany, Greece, Ireland
Full-time
Senior
Application Security Engineer
Cybersecurity
AWS CI/CD JavaScript Kubernetes Penetration Testing Python React Ruby Ruby on Rails
Apply Now
Pennylane

Pennylane

Pennylane offers an all-in-one financial management and accounting platform designed for business leaders and their accountants, enabling them to efficiently manage their finances and accounting in one place while focusing on their core business activi...

Diversified Financial Services
251-1K
Founded 2020
$97M raised
View All Jobs 23

Description

  • Ensure the security of Pennylane’s application, infrastructure, dependencies, code, and configuration.
  • Work with the Product team to integrate security from feature design through delivery.
  • Review code from a secure development perspective across a high release volume.
  • Detect vulnerabilities, propose patches, and help strengthen CI/CD security controls.
  • Secure AWS infrastructure, including the Kubernetes environment, with the DevOps team.
  • Perform regular security assessments such as code reviews, pentests, and bug bounty-related analysis.
  • Strengthen detection of malicious activity and respond to security incidents by investigating logs, blocking attacks, and recommending corrective actions.
  • Support ISO 27001 compliance for development-related controls through training, audits, and non-conformity management.
  • Build and improve secure development training materials and deliver regular training to developers.
  • Promote security awareness across the company and contribute technical input to tenders.

Requirements

  • Experience performing offensive security assessments on applications and infrastructure.
  • Ability to exploit and fix a wide range of web vulnerabilities beyond the OWASP Top 10.
  • Experience with at least one programming language such as Ruby, Python, or JavaScript.
  • Experience with cloud infrastructure security.
  • Ability to explain technical security topics to non-technical audiences.
  • Fluency in French and/or English, both spoken and written.
  • Humble, proactive, organized, and able to work well in a remote, collaborative environment.
  • Quick learner who is comfortable working across application security, cloud security, training, and ISO 27001 topics.
  • English level is assessed and appreciated according to the department.
  • Experience with Ruby on Rails, ReactJS, AWS, and Kubernetes is relevant to the role.

Benefits

  • 25 paid vacation days.
  • Competitive compensation package.
  • Company shares/equity.
  • Home office budget plus a monthly coworking allowance.
  • Access to Gymlib with 8,000 fitness spaces and 300+ wellness activities across Europe.
  • Access to Busuu for English or French language learning.
  • Latest Apple equipment.
  • Remote work from your country of residence in Europe, within a maximum two-hour time difference from CET.
  • For France-based employees: French contract, 6 to 12 RTT, 5 weeks of PTO, Swile lunch credits, and Alan Blue healthcare coverage.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Apollo.io

Staff Application Security Engineer

Apollo.io 251-1K Professional Services

Apollo.io is hiring a Staff Application Security Engineer to lead application security strategy and hands-on security work across its product, platform, and AI-powered systems.

United States Full-time Lead Application Security Engineer
$225k-$282k
Docker Elasticsearch Kubernetes Linux MongoDB OAuth Penetration Testing Python React Ruby Ruby on Rails Terraform
2 days, 23 hours ago
Fingerprint

Staff Application Security Engineer

Fingerprint 51-250 IT Services

Fingerprint is hiring a Staff Application Security Engineer to build and operate its foundational AppSec function, securing the device-intelligence platform and raising security standards across engineering.

United States Full-time Lead Application Security Engineer
$177k-$240k
Android AWS CI/CD Cloudflare Encryption Go iOS JavaScript Network Security Penetration Testing Python Secrets Management TypeScript
3 days ago
Very Good Security

Application Security Engineer

Very Good Security 51-250 Internet Software & Services

VGS is hiring an Application Security Engineer to build a developer-focused security program for its global payment tokenization platform, improving application security throughout the software development lifecycle.

United States Canada Full-time Mid Level Application Security Engineer
$175k-$230k
AWS Burp Suite CI/CD GitHub GitLab Java Microservices Python
1 week ago
Harness.io

Senior Product Security Engineer

Harness.io 251-1K Internet Software & Services

Harness is hiring a Senior Product Security Engineer to secure its AI-powered software delivery platform by identifying vulnerabilities, building security tooling, and embedding secure practices across the software development lifecycle.

United States Full-time Senior Application Security Engineer
$150k-$200k
AWS Azure CI/CD DevSecOps GCP Java Kubernetes OWASP Penetration Testing REST API
1 week ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers