Join our team as

Application Security Engineer · Mid-Senior · Low-level

Poland

Remote

Engineering

At Nord Security, we’re creating a safer cyber future.

We help people and businesses take back control of their online security, privacy, and data. From VPNs to password managers, threat intelligence to eSIMs for travel—our teams turn complex problems into solutions trusted by millions worldwide.

Life is online. In this role, you’ll help people own it.

Main Responsibilities

Conduct security reviews of application designs, source code, and third-party libraries;
Perform regular application vulnerability assessments using both automated tools and manual testing techniques (e.g., SAST, DAST, SCA, penetration testing);
Collaborate with development teams to design secure architectures and implement security controls;
Help maintain security tools, scripts, and processes to support secure development;
Stay current with industry trends, zero-day vulnerabilities, and best practices in application security;
Develop scripts, security automation tools to enhance application security testing processes;
Design and deliver training for security engineering awareness & adoption;
Actively look for internal security gaps within the product or organization overall.
Ensure mobile/desktop applications are sufficiently tested and support internal and external audits;

Core Requirements

- Proven experience in mobile/desktop application security assessment planning, testing, methodologies, and vulnerability reporting;
- Strong understanding of secure coding practices;
- Ability to perform manual security code audit;
- Proficiency in at least one low-level programming language (e.g. C, C++, Rust, Go).
- Solid understanding of networking protocols such as TCP, UDP and the HTTP protocol.
- Familiarity with debuggers (e.g. GDB, LLDB, WinDbg).
- Familiarity with reverse engineering tools (e.g. Ghidra, IDA).
- Solid understanding of memory corruption issues, buffer overflows and related vulnerability classes.
- Familiarity with common authentication and authorization protocols (OAuth, SAML, JWT, etc.).
- Ability to work with networking tools such as Wireshark, tcpdump.
- Ability to quickly assimilate new technologies and tools;
- Sense of ownership with strong problem solving and investigation skills;
- Ability to build and maintain relationships, influence key stakeholders across the business;
- Bonus points for community contributions like public CVEs, bug bounty recognition, open-source tools, blogs, etc.

What we offer

🎓 Sharpen your edge

Growth is built into how we work. Extensive online and in-person training programs, access to platforms like Coursera and Skillshare, a mentorship program, and internal career moves when you’re ready for something new — your development has no ceiling here.

🌿 Take the time you need

Rest isn’t a reward — it’s part of the deal. Enjoy extra vacation days that grow with your time here, plus additional days off for sick leave, special occasions, and parenting.

🏥 Get premium healthcare

Your health shouldn’t be something you worry about. We provide premium private health insurance so you have peace of mind and fast access to care whenever you need it. Available in Lithuania and Poland.

🪷 Protect your peace

A peaceful mind isn’t a luxury — it’s the foundation. We provide free subscriptions to top-rated Calm and Headspace apps, offer resilience and mindfulness trainings, and run dedicated mental health events.

🏋🏻 Own your fitness

Feeling good shapes how you work, think, and create. That’s why we offer in-house gyms, Multisport and Urban Sport cards, and online workouts. Need something tailored? Our Physical Well-Being experts are here with group mobility sessions, fitness guidance, and one-on-one consultations.

🌴 Pack your bags for workation

Picture this: the entire company flies out abroad. The days are packed with workshops, activities, concerts, and real time together. It’s legendary. If you’ve heard stories, they’re probably true.

✈️ Work from anywhere

New surroundings spark new thinking. When you need a reset, switch location and work from wherever keeps you sharp, creative, and in the zone.

🎁 Celebrate your milestones

The moments that make life special shouldn’t pass quietly. Birthdays, work anniversaries, weddings, new family members — each is marked with a special gift.

👶🏻 Parent with ease

When you’re a parent, the juggle is real. To make it smoother, we organize summer camps for the little ones and offer flexibility that lets you show up both for your family and your team.

🎉 Join the party

It never gets boring here. Get ready for team buildings that bring people closer, year-round company events that are equal parts educational and energizing, and the highlights everyone waits for — our iconic summer and winter celebrations.

⭐ Unlock Cyber City

Whether Vilnius-based or visiting from remote, our Vilnius HQ is fully yours to enjoy. Need focus? Silent room. Need energy? Open gyms. Need a break? Game room, music room, coffee bar. It’s a modern workspace built with your comfort in mind.

Kindly refer to our Privacy Notice for Recruitment Candidates for comprehensive information regarding our data handling procedures throughout recruitment processes.

We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance.

By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter.

If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at [email protected]. Should you prefer to opt out of the automated evaluation, please submit your application directly to [email protected].