Application Security Engineer | Senior

Nord Security is the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet, providing privacy, security, and control tools for millions.

• Proven experience in mobile and desktop application security assessments, including planning, testing, methodologies, and vulnerability reporting.
• Good understanding of network operations, including OSI and TCP/IP models, with a specific focus on VPNs.
• Experience collaborating with stakeholders to define security test scopes and remediation actions.
• Knowledge of secure coding practices.
• Strong problem-solving and investigative skills with a sense of ownership.
• Experience with security topics across multiple operating systems: Linux, Android, iOS, macOS, Windows.
• Ability to build and maintain relationships and influence key business stakeholders.
• Capability to make product-related business decisions based on threats and vulnerabilities.
• Assertiveness combined with an ability to compromise.

• Ensure software design security and define secure implementation practices by syncing with product development teams.
• Facilitate smooth security-related communication among technical teams involved in product releases.
• Plan and manage the development of security tools within the team.
• Create tasks for product security reviews, including SAST, DAST, and SCA results.
• Cooperate with product teams to learn about changes early for informed security decisions.
• Ensure mobile, desktop applications, and browser extensions undergo sufficient testing.
• Support internal and external security audits.
• Design and deliver training for security engineering awareness and adoption.
• Actively identify internal security gaps within the product and organization.
• Address security questions and provide advice on product security direction.

Candidates must provide accurate and complete information during recruitment. Limited AI tool use for application refinement is allowed but candidates are responsible for their submissions. Application processing may include automated AI-based evaluation tools which support but do not replace human decision-making. Candidates can opt out of automated evaluation by applying via provided direct email addresses.