Fraud Prevention Engineer | Mid-Senior | NordVPN

Nord Security is the company behind NordVPN, Threat Protection Pro, and the NordLynx protocol, providing advanced cybersecurity tools impacting millions of users worldwide.

• 3+ years of experience in fraud prevention, security engineering, or a technical payments role
• Proficiency in JavaScript/TypeScript, comfortable with Cloudflare Workers, Turnstile, and browser-side challenge flows
• Understanding of backend systems including navigating server-side codebases, tracing API flows, and reading system logs
• Strong SQL skills including joins, window functions, and working with large transaction datasets
• Hands-on experience with Cloudflare (WAF, bot management, rate limiting) or similar edge/CDN security platforms
• Ability to communicate technical findings effectively to non-technical stakeholders and vice versa

Nice to have:

• Python scripting for automation and data analysis
• Experience with log and observability tools like ELK, Grafana, and Datadog
• Background in application security or threat modeling
• Familiarity with fraud platforms such as Forter, Riskified, Sift, or in-house rule engines
• Knowledge of Git workflow and CI/CD basics

• Investigate fraud attacks end-to-end, identifying vectors and performing root cause analysis at infrastructure and application levels
• Implement countermeasures against fraud attacks
• Configure and optimize Cloudflare components including WAF, bot management, rate limiting, and Workers
• Configure and optimize Turnstile challenge flows
• Serve as the technical bridge between fraud analysts, engineering, and product teams
• Analyze multiple attack vectors and prioritize technical fraud prevention tasks on the roadmap
• Build tooling, scripts, and queries to enhance the fraud analyst team's technical capabilities
• Maintain a deep understanding of payment flows such as authorization, 3DS, and tokenization, including identifying vulnerabilities

Candidates must provide accurate and complete information during recruitment. Limited use of AI tools to refine application materials is allowed, but candidates remain responsible for their submissions. Applications may be processed using AI-based tools for evaluation to support human decision-making. Candidates can contact [email protected] for information on AI usage or opt-out by applying via [email protected].