Application Security Engineer | Senior

Nord Security is the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet, providing privacy, security, and control tools.

• Proven experience in mobile and desktop applications security assessment including planning, testing, methodologies, and vulnerability reporting.
• Good understanding of network models, especially OSI and TCP/IP, with a focus on VPN technologies.
• Experience collaborating with stakeholders to define security test scopes and remediation actions.
• Knowledge of secure coding practices.
• Strong sense of ownership, problem-solving, and investigative skills.
• Experience with security topics across various operating systems: Linux, Android, iOS, macOS, and Windows.
• Ability to build and maintain relationships and influence stakeholders across the business.
• Capability to make product-related business decisions based on threat and vulnerability assessments.
• Assertiveness combined with the ability to compromise.

• Ensure software design security and define secure implementation practices by syncing with product development teams.
• Facilitate security-related communication among technical teams to ensure alignment.
• Plan and manage development of security tools within the team.
• Create tasks based on product security reviews such as SAST, DAST, and SCA results.
• Collaborate with product teams to be informed of product changes early to make security decisions.
• Ensure thorough testing of mobile and desktop applications and browser extensions.
• Support internal and external security audits.
• Design and deliver security engineering awareness and adoption training.
• Proactively identify internal security gaps within the product or organization.
• Provide security guidance and advice regarding product security direction.

Candidates must provide accurate and complete information during recruitment. Limited AI assistance for application refinement is acceptable but candidates are responsible for accuracy. Applications may be processed using automated tools but reviewed by recruiters. Candidates can contact [email protected] for data privacy inquiries or opt out of automated evaluation by applying directly via [email protected].