Senior Application Security Engineer

📋 Description Security by design: protect Pennylane's app and infra. Collaborate with Product to embed security from design to delivery. Secure Rails and ReactJS app: dependencies, code, infra, config. Perform code reviews from a secure development perspective. Identify vulnerabilities and propose patches. Strengthen CI/CD security and AWS/EKS security. 🎯 Requirements Offensive security assessments on apps and infrastructure. Exploit and fix web vulnerabilities; explain to non-technical people. Experience in Ruby, Python or JavaScript for scripting or projects. Cloud infrastructure security experience. Translate technical terms to promote security adoption. Fluent in French and/or English (writing and speaking). 🎁 Benefits 25 vacation days paid by Pennylane Competitive compensation package Company shares Home office budget + coworking space allowance Gymlib access to 8000 spaces in Europe Latest Apple equipment provided