Remote Application Security Engineer — Secure Apps & Cloud

Pennylane SAS; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Company shares

Home workspace budget

Gymlib fitness access

Job summary

Pennylane is seeking an Application Security Engineer to join Louis's team. You will manage security across Pennylane’s Ruby on Rails web app and React frontend, safeguard cloud infrastructure, and coach developers on secure coding practices.

You will drive ISO 27001 compliance, run regular security assessments, and help build training materials for the Security Champions program. This remote-friendly role welcomes talent across Europe, with France-based contracts offered if located there.

Qualifications

• Capable of offensive security assessments on apps and infra.
• Able to exploit and fix a wide range of Web vulnerabilities and explain them.
• Experience in Ruby, Python, or JavaScript for scripts or projects.
• Experience in cloud infrastructure security.
• Able to communicate technical terms to non-technical colleagues.
• Fluent in French and/or English.
• Team player and comfortable working with remote colleagues.

Responsibilities

• Security by design: protect Pennylane app and infra.
• Collaborate with Product to embed security in features from design to delivery.
• Secure main web apps built with RoR and ReactJS and their infra.
• Conduct secure code reviews across frequent releases.
• Detect vulnerabilities and propose patches.
• Improve CI/CD security configurations.
• Secure AWS infra and Kubernetes (AWS EKS) with DevOps.
• Carry out regular security assessments and audits.
• Respond to security incidents and mitigate threats.
• Train developers and run Security Champions program.

Skills

Offensive security

Vulnerability exploitation

Ruby

Python

JavaScript

Cloud security

Security awareness

French/English

Tools

AWS

Kubernetes

Job description

Pennylane is seeking an Application Security Engineer to join Louis's team. You will manage security across Pennylane’s Ruby on Rails web app and React frontend, safeguard cloud infrastructure, and coach developers on secure coding practices.

You will drive ISO 27001 compliance, run regular security assessments, and help build training materials for the Security Champions program. This remote-friendly role welcomes talent across Europe, with France-based contracts offered if located there.