Abrar Admin

Pennylane SAS

<div>Are you looking to have an impact on the daily life of millions of entrepreneurs in France (and tomorrow in Europe)?
Are you looking for a work environment that values trust, proactivity, and autonomy?
Then Pennylane is the right place for you !<div></div> 
Our vision
We aim to become the most beloved financial Operating System of French SMEs and Accounting Firms (and soon, European ones).
We help entrepreneurs rid themselves of time-consuming tasks related to accounting and finance while providing them with access to key financial information to assist in making the best decisions for their business.<div></div> 
About us
Pennylane is one of the fastest growing Fintechs in France (and soon to be in Europe!)
In 5 years of existence, we&rsquo;ve managed to :
Make ourselves known as a groundbreaking accounting and financial software for small businesses and their accountants
Raise a total of &euro;359 millions, including from Sequoia, the famous fund from the Silicon Valley who invested early in companies like Google, Facebook, Airbnb, Stripe, Paypal and much more...
Grow from 7 cofounders to 1000 happy Pennylaners : we&rsquo;re now recognized as one of the greatest places to work in France (and also remotely), with a 4.6/5 rating on Glassdoor.
Build an international environment with more than 25 nationalities, with a strong remote-friendly culture, where 30% of the employees are already working from all parts of Europe
Earn the trust of thousands of customers and accounting firms and obtain outstanding ratings
Already more than 1 000,000 small and medium-sized enterprises (SMEs) and over 6000 accounting firms use Pennylane in France!
Team and environment
As we keep on growing (+500 people joined Pennylane in 2025!), we're seeking an Application Security Engineer to join Louis's team of 5. You'll handle all technical security matters, support ISO 27001 compliance, and advise employees&mdash;especially developers&mdash;on security best practices.
The technical security team manages security issues from detection to resolution, collaborating with developers and Security Champions when needed.
Your tasks
Security by design : ensure the security of Pennylane&rsquo;s application and infrastructure
<ul><li>Engage with Product Team to integrate security in our features from from the beginning, from design to delivery</li><li>
Ensure the security of the main Web application written in Ruby on Rails and ReactJS: its dependencies, its code, its infrastructure and its configuration</li><li>
Conducting code reviews from a secure development point of view (about 80 releases per day).
</li><li>Detect vulnerability and propose associated patches</li><li>
Raise the security level of our CI/CD configuration
</li><li>With the DevOps team, secure our AWS infrastructure, including its Kubernetes environment (AWS EKS)</li></ul>
Vulnerability Management
<ul><li>Conduct and perform regular security assessments (internally or by an external consulting companies) on the applications (code reviews/pentests/bug bounty in particular) and the infrastructure</li><li>
Strengthen the current means of detecting malicious attempts</li><li>
Be involved in all security incidents, investigate logs, block attacks, and propose corrective measures to prevent future threats.</li></ul>
Compliance &amp; awareness
<ul><li>Ensure compliance with ISO 27001 controls (processes) related to development (mandatory code practices, validation, patch management, vulnerability management, etc.) by training developers, monitoring projects (tech, product), conducting regular internal audits and managing tech non-conformities</li><li>
Build/Improve secure development training materials and conduct regular training sessions with the developers. Engaging them in our Security Champions program
</li><li>Improve the security awareness through the company
</li><li>Contribute to tenders to explain our security policies and provide the necessary technical details</li></ul>
These missions are not exhaustive and remain evolving.
You&rsquo;re the right candidate if
You ideally have the following skills/experience:<ul><li>
Able to perform offensive security assessments on an infrastructure and an application</li><li>
You know how to exploit and fix a wide range of Web vulnerabilities and are able to explain them to non-technical person (not just the OWASP top 10)</li><li>
You already have an experience in a programming language (Ruby, Python, JavaScript), either for quick and dirty scripting to exploit a vulnerability or for larger projects</li><li>
You have an experience in cloud infrastructure security</li><li>
You are able to popularize technical terms to facilitate the adoption of security measures within projects or to broadcast messages to Pennylaners</li><li>
You are fluent in French and/or English (both oral and written)</li></ul>
Your soft skills :<ul><li>
You are humble</li><li>
You are a team player, and working with remote colleagues is not an issue for you</li><li>
You are proactive and organized</li><li>
You are a quick learner, and you like to work on different projects (application security, cloud infrastructure, training, ISO 27001&hellip;)</li></ul>
What does the recruitment process look like ?<ul><li>
You will first have a general chat with Alexandre, Talent Acquisition (30min)</li><li>
Then you&rsquo;ll meet Louis, (AppSec Team Lead) and 1 team member for a technical interview (1h)</li><li>
You carry out independently the technical challenge for the next 48h</li><li>
Then, you&rsquo;ll discuss about your solutions with Louis and another team member - (1h)</li><li>
Finally, a last culture fit meeting with Guillaume, Head of Security (1h)</li></ul>
We make sure we move fast; you can expect the recruitment process with us to last between 15 and 25 days in total.
What do we do to make your work life easier
Wherever you are based, you will get 25 vacations days paid by Pennylane
You&rsquo;ll have a competitive compensation package
You'll get company shares to enjoy a piece of the success story you're building with us
You&rsquo;ll have a budget to turn your home into a more comfortable workspace, as well as a monthly allowance to work from a coworking space whenever you feel like it
Through our partner Gymlib, you&rsquo;ll have access to 8000 fitness spaces in Europe and more than 300 activities related to wellness
You&rsquo;ll get the latest Apple equipment
Depending on the teams and the requirements of the position - you'll be able to work remotely from your country of residence, as long as it is in Europe and within a maximum time difference of two hours from the CET time zone
We are committed to regularly coming together for company events such as Tech Days (which bring remote Pennylaners together every 3 months) or our annual company seminar, fostering significant moments of cohesion for everyone.<div></div> 
If you are based in France, you will have a French contract following French regulation on top of the additional perks : 6 to 12 RTT, 5 weeks PTOs, lunch credits (Swile), Alan Blue healthcare cover and regular events in cities where Pennylaners are mostly presents (Lyon, Bordeaux, Nantes&hellip;)
We're working on providing those last advantages to our people based outside of France as well, but it can be quite more complex depending on different countries.<div></div> 
Who are we looking for ?
To thrive at Pennylane, you need :<ul><li>To speak English (level is assessed and appreciated according to the department you&rsquo;re applying to)</li><li>To be energized by an ever-shifting work environment</li><li>To be highly collaborative (within your team or other stakeholders)</li><li>Sufficiently experienced to prioritize business-led actions on your day to day activity</li></ul><div></div> 
We know that some people are less likely to apply than others, if they don&rsquo;t feel like they meet the full list of criteria.
If you&rsquo;re hesitating, we encourage you to apply : who knows, it might be the start of a meaningful and long-lasting collaboration.<div></div> 
Important information for candidates
Recruitment scam attempts are on the rise. We invite you to remain vigilant during your exchanges.
Applications through official channels only : apply exclusively through our job postings published on our official platforms (career site, official partner pages).
Always verify the sender's email address: our communications are sent from professional email addresses with the domains @pennylane.com or @pennylane-partners.com
We will never ask you for payment or financial information
(bank details, payment for an interview, equipment purchases, etc.) as part of the recruitment process. If such a request is made to you, it is fraudulent. We invite you to not respond and to report it to us immediately.<div></div> 
We also want to emphasize that we fully embrace diversity, equity and inclusion and that we&rsquo;re doing our best to create a safe and inclusive environment.
We are committed to providing an equal employment opportunity regardless of gender, sexual orientation, origin, disabilities, or any other traits that make you who you are. If anything, diversity makes us a more fun place to work at.<div></div> 
Donn&eacute;es personnelles
Pennylane traite vos donn&eacute;es pour g&eacute;rer votre candidature et &eacute;valuer votre ad&eacute;quation au poste. Si votre candidature n&rsquo;aboutit pas, vos donn&eacute;es peuvent &ecirc;tre conserv&eacute;es 2 ans &agrave; compter de notre dernier &eacute;change ou de la cl&ocirc;ture du recrutement afin de constituer &amp; g&eacute;rer un vivier de candidats. Vous pouvez vous opposer &agrave; tout moment et demander la suppression de vos donn&eacute;es en &eacute;crivant &agrave; : dpo@pennylane.com.
 
Notre data policy 
 
Personal Data
Pennylane processes your data to manage your application and assess your suitability for the position. If your application is unsuccessful, your data may be retained for 2 years from our last exchange or the closing of the recruitment process, in order to build and manage a candidate pool. You may object at any time and request the deletion of your data by writing to dpo@pennylane.com. Learn more 
 
Personenbezogene Daten
Pennylane verarbeitet Ihre Daten, um Ihre Bewerbung zu bearbeiten und Ihre Eignung f&uuml;r die Stelle zu beurteilen. Sollte Ihre Bewerbung nicht erfolgreich sein, k&ouml;nnen Ihre Daten bis zu 2 Jahre ab unserem letzten Austausch oder dem Abschluss des Rekrutierungsverfahrens gespeichert werden, um einen Kandidatenpool aufzubauen und zu verwalten. Sie k&ouml;nnen jederzeit Widerspruch einlegen und die L&ouml;schung Ihrer Daten beantragen, indem Sie an dpo@pennylane.com schreiben. Mehr erfahren</div>

Senior Application Security Engineer

<div>Are you looking to have an impact on the daily life of millions of entrepreneurs in France (and tomorrow in Europe)? Are you looking for a work environment that values trust, proactivity, and autonomy? Are our Engineering principles aligned with your vision? Then Pennylane is the right place for you!<h2 class="jobSectionHeader">
Our vision</h2>
We aim to become the most beloved financial Operating System of French SMEs and Accounting Firms (and soon, European ones). We help entrepreneurs rid themselves of time-consuming tasks related to accounting and finance while giving them access to the key financial information they need to make the best decisions for their business.<h2 class="jobSectionHeader">
About us</h2>
Pennylane is one of the fastest growing Fintechs in France (and soon in Europe!). In 5 years of existence, we've managed to:<ul><li>
Make ourselves known as a groundbreaking accounting and financial software for small businesses and their accountants</li><li>
Raise a total of &euro;400 million, including from Sequoia &mdash; the famous Silicon Valley fund that invested early in companies like Google, Facebook, Airbnb, Stripe and Paypal</li><li>
Grow from 7 cofounders to 1,000 happy Pennylaners, and earn a place among the greatest companies to work for in France (and remotely), with a 4.6/5 rating on Glassdoor</li><li>
Build an international environment with more than 25 nationalities and a strong remote-friendly culture, where 30% of employees already work from all parts of Europe</li><li>
Earn the trust of thousands of customers and accounting firms, with outstanding ratings</li><li>
Reach more than 1,000,000 small and medium-sized enterprises (SMEs) and over 6,000 accounting firms using Pennylane in France</li></ul><h2 class="jobSectionHeader">
Why Core AI matters</h2>
AI is reshaping how entrepreneurs and accountants work &mdash; and a growing share of the traffic to our product will increasingly come from agents, not only from humans. The Core AI team sits at the heart of our AI strategy: while our solution squads (Copilot, Autopilot, AI Studio) build customer-facing AI features, Core AI builds the shared foundations they all rely on, giving Pennylane a durable technical edge &mdash; including on cost and sovereignty.<h2 class="jobSectionHeader">
Why this position matters</h2>
By joining Core AI as an AI Engineer, you'll play a pivotal role in large projects, bringing your engineering and machine learning expertise to build the agentic intelligence, quality and models that our solution squads rely on.<h2 class="jobSectionHeader">
How you'll contribute</h2><ul><li>
Build and maintain the agent harness &mdash; the core runtime that orchestrates LLM calls, tool use, context construction, memory and guardrails &mdash; and make it reliable in production.</li><li>
Own the evaluation stack: design eval pipelines, golden datasets, LLM-as-judge and human-eval workflows; track agent performance, regressions and failure modes, and turn production failures into systematic improvements.</li><li>
Do prompt and behaviour engineering and retrieval/RAG at scale, defining what &quot;good&quot; looks like for agents completing complex accounting workflows end to end.</li><li>
Host and improve our own small models where it creates leverage: serving and inference of open-source LLMs, help fine-tuning and post-training (SFT / DPO / RL), and document-extraction models &mdash; for performance, cost and sovereignty.</li><li>
Work closely with Product teams and domain experts (accountants) so that fulfilling real user needs stays at the center of what we build.</li></ul><h2 class="jobSectionHeader">
What you can expect</h2>
Within one month:<ul><li>
You'll learn everything about our company, our teams and our vision during the first onboarding week.</li><li>
You'll get familiar with our stack and AI tooling (agent harness, evaluation tooling, model providers, MCP), and deliver a few small contributions that give you a concrete taste of our tools and processes.</li><li>
You'll be given time to meet your future stakeholders and gain a deep knowledge of our product and operations.</li></ul>
Within 3 months:<ul><li>
You'll be in charge of items in our roadmap, defining and prioritizing your tasks autonomously.</li><li>
You'll be comfortable with our technical stack (Python, agentic frameworks, evaluation tooling, model serving and AWS).</li><li>
You'll contribute to larger cross-team projects.</li></ul>
Within 6 months:<ul><li>
You'll proactively contribute to the team's roadmap.</li><li>
You'll work with engineers and data practitioners on improving our stack, AI platform and evaluation practices.</li><li>
You'll share your learnings and best practices within the team.</li></ul>
And beyond &mdash; the team will keep growing with the company, which means:<ul><li>
Opportunities to recruit and mentor new team members</li><li>
Increased accountability in project leadership</li><li>
Responsibilities to design and implement new processes, tools and best practices so your team works even more efficiently</li></ul> 
Good to know: across our Tech organisation, engineers can take part in cross-cutting specialist groups (&quot;fellowships&quot;) on topics such as evaluation, retrieval, prompt and behaviour design or model serving &mdash; a great way to share practices beyond your own squad.<h2 class="jobSectionHeader">
You're the right candidate if you:</h2><ul><li>
Have 5&ndash;8 years of experience and are very strong in Python, with hands-on experience building LLM and agentic systems at scale in production &mdash; prompting, tool use, context construction, RAG, and handling failure, state and reliability (not just calling a model API).</li><li>
Treat evaluation as a first-class discipline: golden datasets, LLM-as-judge, human eval, A/B testing, and measuring agent quality, regressions and edge cases.</li><li>
Have a good grasp of applied LLM/ML and AI infrastructure (model serving, vector databases, cost and latency).</li><li>
Have exposure to model fine-tuning and post-training (SFT, DPO, RL).</li><li>
Have a balanced blend of technical, business and product skills, communicate well (including with non-technical domain experts), and are fluent in English (French is not mandatory).</li></ul><h2 class="jobSectionHeader">
Who are we looking for?</h2>
To thrive at Pennylane, you need:<ul><li>
To speak English (levels are assessed and appreciated according to the department you're applying to)</li><li>
To be energized by an ever-shifting work environment</li><li>
To be highly collaborative (within your team and with other stakeholders)</li><li>
To be sufficiently experienced to prioritize business-led actions in your day-to-day activity</li></ul>
We know that some people are less likely to apply than others if they don't feel like they meet the full list of criteria. If you're hesitating, we encourage you to apply: who knows, it might be the start of a meaningful and long-lasting collaboration.<h2 class="jobSectionHeader">
What does the recruitment process look like?</h2><ul><li>
A first interview with our Talent Acquisition Manager</li><li>
A case study interview to discuss a topic closely related to one of our priorities (75 min)</li><li>
A past-project interview to hear about your experience (60 min)</li><li>
An interview with our Tech &amp; Product leaders to discuss our company culture (60 min)</li></ul><h2 class="jobSectionHeader">
What we do to make your work life easier</h2><ul><li>
Wherever you are based, you'll get 25 vacation days paid by Pennylane</li><li>
You'll have a competitive compensation package</li><li>
You'll get company shares to enjoy a piece of the success story you're building with us</li><li>
You'll have a budget to turn your home into a more comfortable workspace, as well as a monthly allowance to work from a coworking space whenever you feel like it</li><li>
Through our partner Gymlib, you'll have access to 8,000 fitness spaces in Europe and more than 300 wellness activities</li><li>
You'll have access to Busuu to perfect your English or your French</li><li>
You'll get the latest Apple equipment</li><li>
Depending on the team and the requirements of the position, you'll be able to work remotely from your country of residence, as long as it is in Europe and within a maximum time difference of two hours from the CET time zone</li><li>
We regularly come together for company events such as Tech Days (which bring remote Pennylaners together every 2 months) and our annual company seminar</li></ul>
If you are based in France, you'll have a French contract following French regulation, on top of the additional perks: 6 to 12 RTT, 5 weeks of PTO, lunch credits (Swile), Alan Blue healthcare cover, and regular events in cities where Pennylaners are mostly present (Lyon, Bordeaux, Nantes&hellip;).
We're working on providing those last advantages to people based outside of France as well, though it can be more complex depending on the country.<h2 class="jobSectionHeader">
Important information for candidates</h2>
Recruitment scam attempts are on the rise. We invite you to remain vigilant during your exchanges.<ul><li>
Applications through official channels only: apply exclusively through our job postings published on our official platforms (career site, official partner pages).</li><li>
Always verify the sender's email address: our communications are sent from professional email addresses with the domains @pennylane.com or @pennylane-partners.com.</li><li>
We will never ask you for payment or financial information (bank details, payment for an interview, equipment purchases, etc.) as part of the recruitment process. If such a request is made to you, it is fraudulent &mdash; please do not respond and report it to us immediately.</li></ul>
We fully embrace diversity, equity and inclusion, and we're committed to providing equal employment opportunity regardless of gender, sexual orientation, origin, disabilities, or any other traits that make you who you are.
Donn&eacute;es personnelles
Pennylane traite vos donn&eacute;es pour g&eacute;rer votre candidature et &eacute;valuer votre ad&eacute;quation au poste. Si votre candidature n&rsquo;aboutit pas, vos donn&eacute;es peuvent &ecirc;tre conserv&eacute;es 2 ans &agrave; compter de notre dernier &eacute;change ou de la cl&ocirc;ture du recrutement afin de constituer &amp; g&eacute;rer un vivier de candidats. Vous pouvez vous opposer &agrave; tout moment et demander la suppression de vos donn&eacute;es en &eacute;crivant &agrave; : dpo@pennylane.com.
 
Notre data policy 
 
Personal Data
Pennylane processes your data to manage your application and assess your suitability for the position. If your application is unsuccessful, your data may be retained for 2 years from our last exchange or the closing of the recruitment process, in order to build and manage a candidate pool. You may object at any time and request the deletion of your data by writing to dpo@pennylane.com. Learn more 
 
Personenbezogene Daten
Pennylane verarbeitet Ihre Daten, um Ihre Bewerbung zu bearbeiten und Ihre Eignung f&uuml;r die Stelle zu beurteilen. Sollte Ihre Bewerbung nicht erfolgreich sein, k&ouml;nnen Ihre Daten bis zu 2 Jahre ab unserem letzten Austausch oder dem Abschluss des Rekrutierungsverfahrens gespeichert werden, um einen Kandidatenpool aufzubauen und zu verwalten. Sie k&ouml;nnen jederzeit Widerspruch einlegen und die L&ouml;schung Ihrer Daten beantragen, indem Sie an dpo@pennylane.com schreiben. Mehr erfahren</div>

AI Engineer — Core AI

Join Pennylane SAS and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Pennylane SAS

About Company

Senior Application Security Engineer

AI Engineer — Core AI