Application Security Engineer | Mid-Senior | Low-level
Nord Security2 months ago
Kaunas, Lithuania or Vilnius, LithuaniaMid Level / Senior
Responsibilities
- Conduct security reviews of application designs, source code, and third-party libraries.
- Perform automated and manual application vulnerability assessments, including SAST, DAST, SCA, and penetration testing.
- Collaborate with development teams on secure architectures and security controls.
- Maintain security tools, scripts, and secure-development processes.
- Develop security automation tools to improve application security testing.
- Monitor application-security trends, zero-day vulnerabilities, and best practices.
- Deliver security engineering awareness and adoption training.
- Identify internal security gaps across products and the organization.
- Test mobile and desktop applications and support internal and external audits.
Requirements
- Proven experience planning and performing mobile and desktop application security assessments, testing, methodologies, and vulnerability reporting.
- Strong understanding of secure coding practices and ability to perform manual security code audits.
- Proficiency in at least one low-level programming language such as C, C++, Rust, or Go.
- Solid understanding of TCP, UDP, and HTTP networking protocols.
- Familiarity with GDB, LLDB, or WinDbg debuggers.
- Familiarity with reverse-engineering tools such as Ghidra and IDA.
- Strong understanding of memory corruption, buffer overflows, and related vulnerability classes.
- Familiarity with authentication and authorization protocols including OAuth, SAML, and JWT.
- Ability to use networking tools such as Wireshark and tcpdump.
- Strong problem-solving, investigation, ownership, stakeholder collaboration, and relationship-building skills.
- Community contributions such as public CVEs, bug-bounty recognition, open-source tools, or security blogs are valued.
Benefits
- Training, mentorship, and opportunities for professional growth.
- Extra vacation days, sick days, and additional time off.
- Fully covered private health insurance in Lithuania and Poland.
- Free Calm, Headspace, and Mindletic subscriptions plus resilience and mindfulness training.
- In-house gyms, sport cards, online workouts, and personal guidance.
- Company-wide workation trip abroad.
- Work-from-anywhere flexibility.
- Gifts for birthdays, weddings, and new family members.
- Children’s summer camps and flexible scheduling for parents.
- Team-building activities and company events.
- Access to the Vilnius HQ Cyber City facilities, including a coffee bar, gyms, kids’ room, music room, and massage chairs.
About Nord Security
Nord Security builds consumer and business cybersecurity software under the Nord brand, including NordVPN, NordPass, NordLayer, and NordLocker. It sells subscription-based privacy and network security tools—VPN, zero-trust access, password management, encrypted storage, and threat exposure management—to individuals and companies globally. Founded in 2012 and headquartered in Vilnius, Lithuania, its products serve millions of users.