Application Security Engineer | Mid-Senior | Low-level

Nord Security · Remote · Poland ·
Fully remoteFull-timeSenior5+ years
COMPENSATION
€•• – ••k
0 applicants so far

Listed on the employer's job board (Ashby)

  • Fully remote
  • Mid-Senior level
  • C, C++, Rust, or Go
  • Mobile/Desktop security
  • Reverse engineering

Join Nord Security to help millions of users protect their online privacy and data. You will focus on application security for products like VPNs and password managers, conducting manual audits and designing secure architectures.

This position requires deep technical expertise in low-level programming and vulnerability analysis. You will collaborate with development teams to integrate security controls and maintain testing tools.

What you'll do

  • Conduct security reviews of application designs, source code, and third-party libraries
  • Perform vulnerability assessments using automated tools and manual testing techniques
  • Collaborate with developers to design secure architectures and implement controls
  • Maintain security tools, scripts, and processes for secure development support
  • Develop scripts and automation tools to enhance application security testing
  • Design and deliver training for security engineering awareness and adoption
  • Identify internal security gaps within products and the organization
  • Ensure mobile and desktop applications are tested and support audits

What you'll need

  • Proven experience in mobile/desktop application security assessment and testing
  • Strong understanding of secure coding practices and manual code auditing
  • Proficiency in at least one low-level language: C, C++, Rust, or Go
  • Solid knowledge of networking protocols including TCP, UDP, and HTTP
  • Familiarity with debuggers such as GDB, LLDB, or WinDbg
  • Experience with reverse engineering tools like Ghidra or IDA
  • Understanding of memory corruption issues and buffer overflows
  • Knowledge of authentication protocols like OAuth, SAML, and JWT
  • Ability to use networking tools such as Wireshark and tcpdump

Nice to have

  • Community contributions such as public CVEs or bug bounty recognition
  • Development of open-source security tools or technical blogs

Stack

  • C
  • C++
  • Rust
  • Go
  • GDB
  • LLDB
  • WinDbg
  • Ghidra
  • IDA
  • Wireshark
  • tcpdump

How you'll work

  • Fully remote work policy
  • Work from anywhere location flexibility

What you get

  • Training, mentorship, and professional growth opportunities
  • Extra vacation days and sick leave
  • Private health insurance fully covered in Lithuania and Poland
  • Free subscriptions to Calm, Headspace, and Mindletic
  • In-house gyms, sport cards, and personal fitness guidance
  • Company-wide trip abroad for workation
  • Gifts for birthdays, weddings, and new family members
  • Children’s summer camps and schedule flexibility for parents
  • Team building events and company parties
  • Access to Vilnius HQ amenities like coffee bar and kids’ room