Job Opportunities API

The Public Ledger of Openings

← Back to the ledger

Senior Application Security Engineer

Pennylane
CompanyPennylane
CategoryEngineering
LocationParis
RemoteRemote
EmploymentNot stated
LevelSenior
SalaryNot stated by the employer
Posted22 May 2026
Last verified30 Jul 2026
SourceEmployer career page (ashby)
Applications are handled by the employer, not by us.Apply on the employer's site →
Description
Are you looking to have an impact on the daily life of millions of entrepreneurs in France (and tomorrow in Europe)? Are you looking for a work environment that values trust, proactivity, and autonomy? Then Pennylane is the right place for you !   Our vision We aim to become the most beloved financial Operating System of French SMEs and Accounting Firms (and soon, European ones). We help entrepreneurs rid themselves of time-consuming tasks related to accounting and finance while providing them with access to key financial information to assist in making the best decisions for their business.   About us Pennylane is one of the fastest growing Fintechs in France (and soon to be in Europe!) In 5 years of existence, we’ve managed to : 💻 Make ourselves known as a groundbreaking accounting and financial software for small businesses and their accountants 💰 Raise a total of €359 millions, including from Sequoia, the famous fund from the Silicon Valley who invested early in companies like Google, Facebook, Airbnb, Stripe, Paypal and much more... 👨‍👩‍👧‍👦 Grow from 7 cofounders to 1000 happy Pennylaners : we’re now recognized as one of the greatest places to work in France (and also remotely), with a 4.6/5 rating on Glassdoor https://www.glassdoor.fr/Avis/Pennylane-France-Avis-E4171708.htm. 🌍 Build an international environment with more than 25 nationalities, with a strong remote-friendly culture, where 30% of the employees are already working from all parts of Europe 🤝 Earn the trust of thousands of customers and accounting firms and obtain outstanding ratings https://www.google.com/search?q=pennylane&ei=O9pOYvm0Co-blwSmhKmIAw&ved=0ahUKEwi5vsWL-4H3AhWPzYUKHSZCCjEQ4dUDCA4&uact=5&oq=pennylane&gs_lcp=Cgdnd3Mtd2l6EAMyDQgAEIAEELEDEIMBEAoyCwguEIAEEMcBEK8BMgcIABCABBAKMgcIABCABBAKMgUIABCABDIFCAAQgAQyBQgAEIAEMgcIABCABBAKMgcIABCABBAKMgcIABCABBAKOgcIABBHELADOgkIABCwAxAKEEM6CgguEMcBEK8BEAo6BggAEBYQHjoICAAQFhAKEB46DQguEIAEEMcBEK8BEApKBAhBGABKBAhGGABQ7QFY6wVgugdoAXABeACAAUiIAbMCkgEBNZgBAKABAcgBCcABAQ&sclient=gws-wiz 🚀 Already more than 1 000,000 small and medium-sized enterprises (SMEs) and over 6000 accounting firms use Pennylane in France! 👪 Team and environment As we keep on growing (+500 people joined Pennylane in 2025!), we're seeking an Application Security Engineer to join Louis's team of 5. You'll handle all technical security matters, support ISO 27001 compliance, and advise employees—especially developers—on security best practices. The technical security team manages security issues from detection to resolution, collaborating with developers and Security Champions when needed. 🎯 Your tasks Security by design : ensure the security of Pennylane’s application and infrastructure - Engage with Product Team to integrate security in our features from from the beginning, from design to delivery - Ensure the security of the main Web application written in Ruby on Rails and ReactJS: its dependencies, its code, its infrastructure and its configuration - Conducting code reviews from a secure development point of view (about 80 releases per day). - Detect vulnerability and propose associated patches - Raise the security level of our CI/CD configuration - With the DevOps team, secure our AWS infrastructure, including its Kubernetes environment (AWS EKS) Vulnerability Management - Conduct and perform regular security assessments (internally or by an external consulting companies) on the applications (code reviews/pentests/bug bounty in particular) and the infrastructure - Strengthen the current means of detecting malicious attempts - Be involved in all security incidents, investigate logs, block attacks, and propose corrective measures to prevent future threats. Compliance & awareness - Ensure compliance with ISO 27001 controls (processes) related to development (mandatory code practices, validation, patch management, vulnerability management, etc.) by tr
HOUSE ADYou found the opening. Now track it.Tracker, radar and AI drafts in one place.erioun.com →
Senior Application Security Engineer — Pennylane · Job Opportunities API