Senior Application Security Engineer (Fintech)

Location: Remote from France, Portugal, Germany, Italy, Spain, or the United Kingdom; candidates must work from their country of residence in Europe and be within a maximum two-hour time difference from CET.

Company

hirify.global is a French fintech building accounting and financial software for SMEs and accounting firms, with plans to expand across Europe.

What you will do

• Integrate security into product features from design through delivery in collaboration with Product.
• Secure the Ruby on Rails and React application, its dependencies, code, infrastructure, and configuration, including secure code reviews across approximately 80 daily releases.
• Identify vulnerabilities, propose patches, and improve CI/CD security.
• Secure AWS infrastructure and its Kubernetes environment with the DevOps team.
• Perform application and infrastructure assessments, including code reviews, penetration tests, and bug bounty activities; investigate incidents, analyze logs, block attacks, and define corrective measures.
• Support ISO 27001 development controls, train developers, improve security awareness, and contribute technical security information to tenders.

Requirements

• Ability to perform offensive security assessments of applications and infrastructure.
• Experience exploiting and fixing a broad range of web vulnerabilities and explaining them to non-technical audiences.
• Experience with a programming language such as Ruby, Python, or JavaScript, for scripting or larger projects.
• Experience in cloud infrastructure security.
• Ability to simplify technical concepts and support adoption of security measures across projects and the company.
• Fluent French and/or English, both spoken and written.
• Humility, teamwork, proactivity, organization, and the ability to learn quickly and work across application security, cloud infrastructure, training, and ISO 27001 projects.

Culture & Benefits

• Remote-friendly environment focused on trust, autonomy, collaboration, and proactivity.
• 25 paid vacation days; France-based employees also receive 6–12 RTT, five weeks of PTO, lunch credits, and healthcare coverage.
• Company shares, home-office equipment budget, coworking allowance, and the latest Apple equipment.
• Access to fitness and wellness activities through Gymlib.
• Remote company events, including Tech Days every three months and an annual seminar.
• Full-time employment; France-based employees receive a French contract under French regulations.

Hiring process

• Talent Acquisition conversation, followed by a technical interview with the AppSec Team Lead and a team member.
• Complete the technical challenge independently within 48 hours, then discuss the solution with the security team.
• Final culture-fit meeting with the Head of Security; the process generally takes 15–25 days.