Senior Application Security Engineer, Pennylane
Financial operating system for European SMEs
Be an early applicant
Financial operating system for European SMEs
501-1000 employees
Be an early applicant
501-1000 employees
Company mission
To build the leading financial tool for European SMEs.
Role
Who you are
- Able to perform offensive security assessments on an infrastructure and an application
- You know how to exploit and fix a wide range of Web vulnerabilities and are able to explain them to non-technical person (not just the OWASP top 10)
- You already have an experience in a programming language (Ruby, Python, JavaScript), either for quick and dirty scripting to exploit a vulnerability or for larger projects
- You have an experience in cloud infrastructure security
- You are able to popularize technical terms to facilitate the adoption of security measures within projects or to broadcast messages to Pennylaners
- You are fluent in French and/or English (both oral and written)
- You are humble
- You are a team player, and working with remote colleagues is not an issue for you
- You are proactive and organized
- You are a quick learner, and you like to work on different projects (application security, cloud infrastructure, training, ISO 27001…)
- We know that some people are less likely to apply than others, if they don’t feel like they meet the full list of criteria
- If you’re hesitating, we encourage you to apply : who knows, it might be the start of a meaningful and long-lasting collaboration
What the job involves
- As we keep on growing (+500 people joined Pennylane in 2025!), we're seeking an Application Security Engineer to join Louis's team of 5. You'll handle all technical security matters, support ISO 27001 compliance, and advise employees—especially developers—on security best practices
- The technical security team manages security issues from detection to resolution, collaborating with developers and Security Champions when needed
- Security by design : ensure the security of Pennylane’s application and infrastructure
- Engage with Product Team to integrate security in our features from from the beginning, from design to delivery
- Ensure the security of the main Web application written in Ruby on Rails and ReactJS: its dependencies, its code, its infrastructure and its configuration
- Conducting code reviews from a secure development point of view (about 80 releases per day)
- Detect vulnerability and propose associated patches
- Raise the security level of our CI/CD configuration
- With the DevOps team, secure our AWS infrastructure, including its Kubernetes environment (AWS EKS)
- Vulnerability Management
- Conduct and perform regular security assessments (internally or by an external consulting companies) on the applications (code reviews/pentests/bug bounty in particular) and the infrastructure
- Strengthen the current means of detecting malicious attempts
- Be involved in all security incidents, investigate logs, block attacks, and propose corrective measures to prevent future threats
- Compliance & awareness
- Ensure compliance with ISO 27001 controls (processes) related to development (mandatory code practices, validation, patch management, vulnerability management, etc.) by training developers, monitoring projects (tech, product), conducting regular internal audits and managing tech non-conformities
- Build/Improve secure development training materials and conduct regular training sessions with the developers. Engaging them in our Security Champions program
- Improve the security awareness through the company
- Contribute to tenders to explain our security policies and provide the necessary technical details
- These missions are not exhaustive and remain evolving
Application process
- You will first have a general chat with Alexandre, Talent Acquisition (30min)
- Then you’ll meet Louis, (AppSec Team Lead) and 1 team member for a technical interview (1h)
- You carry out independently the technical challenge for the next 48h
- Then, you’ll discuss about your solutions with Louis and another team member - (1h)
- Finally, a last culture fit meeting with Guillaume, Head of Security (1h)
- We make sure we move fast; you can expect the recruitment process with us to last between 15 and 25 days in total
Our take
In multiple mature markets, companies have been using QuickBooks, Xero and other SaaS solutions for accounting, but it is a fragmented industry with each country using its own software solution. In France, there is no definitive SaaS solution for accounting.
Pennylane wants to overhaul current tools and modernise the tech stack of accounting firms, by connecting directly with third-party services that hold valuable information. Accounting firms can use Pennylane collaboratively by accessing the platform to centralise receipts, create invoices and automate tasks. Instead of sending information back and forth with spreadsheets and photo attachments, both clients and accounting firms can interact directly on the platform.
Pennylane has a significant market opportunity ahead, with an ambitious goal to become the preferred management platform for European companies. The company already claims an impressive number of customers and strong backing which will allow it to further develop its platform and expand to other markets in Europe.
Freddie
Company Specialist at Welcome to the Jungle
Insights
25% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jan 2026
$203.5m
SERIES E
Apr 2025
$87.3m
LATE VC
Total funding: $469.4m
Company benefits
- Work remotely from anywhere in Europe, as long as your contract allows you to
- Company shares to enjoy a piece of the success story you're building with us
- A budget to turn your home into a more comfortable workspace, as well as a monthly allowance to work from a coworking space whenever you feel like it
- Access to 8000 fitness spaces in Europe and more than 300 activities related to wellness through our partner Gymlib
- Access to Busuu to perfect your english or your french
- The latest Apple equipment
- Be part of a vibrant social community: we do lots of sports together (running, climbing...), we love to hang out and have a drink together (Thursday afterwork drinks on our rooftop is a usual thing)
- Twice-a-year company seminars
- Wonderful office in the center of Paris
- 10 additional days off (to the 25 standard ones) for those based in France
- Lunch credits (Swile card) to buy your favorite food every day, for those based in France
- Great healthcare cover (Alan Blue) to take care of yourself and your family, for those based in France
Company HQ
Chaussée-d'Antin, Paris, France
Leadership
Arthur Waller
(Co-founder & CEO)Founded PriceMatch in 2012, and progressed from Product Owner to Senior Product Owner at Booking.com between 2015-2018. Co-founded Pennylane in 2020.
Felix Blossier
(Co-founder & COO)Founding Partner of PriceMatch in 2012 and experience as Director General of the French Treasury from 2018-2020. Co-founded Pennylane in 2020.
Tancrède Besnard
(Co-founder & CPO)Co-founded PriceMatch in 2012. Experience as Product Manager for Booking.com between 2016-2018, and current advisor for Predictus. Co-founded Pennylane in 2020.
Share this job
View 11 more jobs at Pennylane