We aim to become the most beloved financial Operating System of French SMEs and Accounting Firms (and soon, European ones). Make ourselves known as a groundbreaking accounting and financial software for small businesses and their accountants Raise a total of €359 millions, including from Sequoia, the famous fund from the Silicon Valley who invested early in companies like Google, Facebook, Airbnb, Stripe, Paypal and much more... Grow from 7 cofounders to * happy Pennylaners : we're now recognized as one of the greatest places to work in France (and also remotely), with a 4.6/5 rating on Glassdoor.

Build an international environment with more than 25 nationalities, with a strong remote-friendly culture, where 30% of the employees are already working from all parts of Europe Application Security Engineer You'll handle all technical security matters, support ISO compliance, and advise employees—especially developers—on security best practices. The technical security team manages security issues from detection to resolution, collaborating with developers and Security Champions when needed.

Security by design : ensure the security of Pennylane's application and infrastructure Engage with Product Team to integrate security in our features from from the beginning, from design to delivery Ensure the security of the main Web application written in Ruby on Rails and ReactJS: its dependencies, its code, its infrastructure and its configuration Raise the security level of our CI/CD configuration With the DevOps team, secure our AWS infrastructure, including its Kubernetes environment (AWS EKS) Conduct and perform regular security assessments (internally or by an external consulting companies)



on the applications (code reviews/pentests/bug bounty in particular) and the infrastructure Be involved in all security incidents, investigate logs, block attacks, and propose corrective measures to prevent future threats. by training developers, monitoring projects (tech, product), conducting regular internal audits and managing tech non-conformities Build/Improve secure development training materials and conduct regular training sessions with the developers. Engaging them in our Security Champions program Improve the security awareness through the company Contribute to tenders to explain our security policies and provide the necessary technical details Able to perform offensive security assessments on an infrastructure and an application You know how to exploit and fix a wide range of Web vulnerabilities and are able to explain them to non-technical person (not just the OWASP top 10) You already have an experience in a programming language (Ruby, Python, JavaScript), either for quick and dirty scripting to exploit a vulnerability or for larger projects You have an experience in cloud infrastructure security You are able to popularize technical terms to facilitate the adoption of security measures within projects or to broadcast messages to Pennylaners You are fluent in French and/or English (both oral and written) You are a team player, and working with remote colleagues is not an issue for you You are a quick learner, and you like to work on different projects (application security, cloud infrastructure, training, ISO ***...) You will first have a general chat with Alexandre, Talent Acquisition (30min) Finally, a last culture fit meeting with Guillaume, Head of Security (1h)

📌 Sr. Application Security Engineer - Remote (Madrid)
🏢 Pennylane
📍 Madrid