> Markdown version of [/jobs/ext/110558-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/110558-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Application Security Engineer - **Company:** Pennylane - **Location:** München, Germany (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Amazon Web Services, Cloud Computing, Cloud Computing Security, Code Review, Continuous Integration, DevOps, Python (Programming Language), Open Web Application Security, Ruby on Rails, Ruby, Software Vulnerability Management, Web Applications, Scripting, ReactJS, Software Security, Kubernetes, Patch Management, AWS EKS, Programming Languages - **Published:** May 24, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=74057053198d55e3 ## About the Role Do you have experience in Ruby on Rails?, * Able to perform offensive security assessments on an infrastructure and an application * You know how to exploit and fix a wide range of Web vulnerabilities and are able to explain them to non-technical person (not just the OWASP top 10) * You already have an experience in a programming language (Ruby, Python, JavaScript), either for quick and dirty scripting to exploit a vulnerability or for larger projects * You have an experience in cloud infrastructure security * You are able to popularize technical terms to facilitate the adoption of security measures within projects or to broadcast messages to Pennylaners * You are fluent in French and/or English (both oral and written) Your soft skills : * You are humble * You are a team player, and working with remote colleagues is not an issue for you * You are proactive and organized * You are a quick learner, and you like to work on different projects (application security, cloud infrastructure, training, ISO 27001…) ## Description Are you looking to have an impact on the daily life of millions of entrepreneurs in France (and tomorrow in Europe)? Are you looking for a work environment that values trust, proactivity, and autonomy? Then Pennylane is the right place for you ! Our vision We aim to become the most beloved financial Operating System of French SMEs and Accounting Firms (and soon, European ones). We help entrepreneurs rid themselves of time-consuming tasks related to accounting and finance while providing them with access to key financial information to assist in making the best decisions for their business., Security by design : ensure the security of Pennylane's application and infrastructure * Engage with Product Team to integrate security in our features from from the beginning, from design to delivery * Ensure the security of the main Web application written in Ruby on Rails and ReactJS: its dependencies, its code, its infrastructure and its configuration * Conducting code reviews from a secure development point of view (about 80 releases per day). * Detect vulnerability and propose associated patches * Raise the security level of our CI/CD configuration * With the DevOps team, secure our AWS infrastructure, including its Kubernetes environment (AWS EKS) Vulnerability Management * Conduct and perform regular security assessments (internally or by an external consulting companies) on the applications (code reviews/pentests/bug bounty in particular) and the infrastructure * Strengthen the current means of detecting malicious attempts * Be involved in all security incidents, investigate logs, block attacks, and propose corrective measures to prevent future threats. Compliance & awareness * Ensure compliance with ISO 27001 controls (processes) related to development (mandatory code practices, validation, patch management, vulnerability management, etc.) by training developers, monitoring projects (tech, product), conducting regular internal audits and managing tech non-conformities * Build/Improve secure development training materials and conduct regular training sessions with the developers. Engaging them in our Security Champions program * Improve the security awareness through the company * Contribute to tenders to explain our security policies and provide the necessary technical details, * To speak English (level is assessed and appreciated according to the department you're applying to) * To be energized by an ever-shifting work environment * To be highly collaborative (within your team or other stakeholders) * Sufficiently experienced to prioritize business-led actions on your day to day activity We know that some people are less likely to apply than others, if they don't feel like they meet the full list of criteria. If you're hesitating, we encourage you to apply : who knows, it might be the start of a meaningful and long-lasting collaboration. ## Related Videos - [Hosting a modern justice system](https://www.wearedevelopers.com/videos/332-hosting-a-modern-justice-system) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)