Application Security Engineer | Mid-Senior | Low-level
Nord Security2 months ago
Remote, PolandMid Level / Senior
Responsibilities
- Review application designs, source code, and third-party libraries for security issues.
- Plan and perform mobile and desktop application vulnerability assessments using automated tools and manual testing techniques.
- Conduct manual security code audits, penetration testing, and vulnerability reporting.
- Collaborate with development teams to design secure architectures and implement security controls.
- Maintain security tools, scripts, and secure-development processes.
- Develop security automation tools to improve application security testing.
- Design and deliver security engineering awareness and adoption training.
- Identify internal security gaps across products and the organization.
- Support internal and external audits and monitor application security trends and zero-day vulnerabilities.
Requirements
- Proven experience planning and conducting mobile or desktop application security assessments, testing, methodologies, and vulnerability reporting.
- Strong understanding of secure coding practices and ability to perform manual security code audits.
- Proficiency in at least one low-level programming language, such as C, C++, Rust, or Go.
- Solid understanding of TCP, UDP, HTTP, authentication and authorization protocols, memory corruption, buffer overflows, and related vulnerability classes.
- Familiarity with debuggers such as GDB, LLDB, or WinDbg; reverse engineering tools such as Ghidra or IDA; and networking tools such as Wireshark or tcpdump.
- Ability to learn new technologies and tools quickly and demonstrate ownership, problem-solving, investigation, stakeholder influence, and relationship-building skills.
- Community contributions such as public CVEs, bug bounty recognition, open-source tools, or security blogs are advantageous.
Benefits
- Training, mentorship, and professional growth opportunities.
- Extra vacation days, sick days, and additional time off.
- Fully covered private health insurance in Lithuania and Poland.
- Free Calm, Headspace, and Mindletic subscriptions plus resilience and mindfulness training.
- In-house gyms, sport cards, online workouts, and personal fitness guidance.
- Company-wide workation trip abroad.
- Work-from-anywhere flexibility.
- Gifts for birthdays, weddings, and new family members.
- Children’s summer camps and flexible scheduling for parents.
- Team-building activities and company events.
- Access to Nord Security’s Vilnius headquarters amenities, including a coffee bar, gyms, kids’ room, music room, and massage chairs.
About Nord Security
Nord Security builds consumer and business cybersecurity software under the Nord brand, including NordVPN, NordPass, NordLayer, and NordLocker. It sells subscription-based privacy and network security tools—VPN, zero-trust access, password management, encrypted storage, and threat exposure management—to individuals and companies globally. Founded in 2012 and headquartered in Vilnius, Lithuania, its products serve millions of users.