Application Security Engineer (Mid-Senior, Low-level)

Stack

Responsibilities

• ▹Conduct security reviews of application designs, source code and third-party libraries
• ▹Perform regular application vulnerability assessments using automated tools and manual testing techniques (SAST, DAST, SCA, penetration testing)
• ▹Collaborate with development teams to design secure architectures and implement security controls
• ▹Help maintain security tools, scripts and processes to support secure development
• ▹Stay current with industry trends, zero-day vulnerabilities and application security best practices
• ▹Develop scripts and security automation tools to enhance application security testing
• ▹Design and deliver training for security engineering awareness and adoption
• ▹Actively look for internal security gaps within the product or organization
• ▹Ensure mobile and desktop applications are sufficiently tested and support internal and external audits

Requirements

• ▹Proven experience in mobile and desktop application security assessment planning, testing, methodologies and vulnerability reporting
• ▹Strong understanding of secure coding practices
• ▹Ability to perform manual security code audits
• ▹Proficiency in at least one low-level programming language (e.g. C, C++, Rust, Go)
• ▹Solid understanding of networking protocols such as TCP, UDP and HTTP
• ▹Familiarity with debuggers (e.g. GDB, LLDB, WinDbg)
• ▹Familiarity with reverse engineering tools (e.g. Ghidra, IDA)
• ▹Solid understanding of memory corruption issues, buffer overflows and related vulnerability classes
• ▹Familiarity with common authentication and authorization protocols (OAuth, SAML, JWT, etc.)
• ▹Ability to work with networking tools such as Wireshark and tcpdump
• ▹Ability to quickly assimilate new technologies and tools

Nice to have

• ▹Community contributions such as public CVEs, bug bounty recognition, open-source tools, blogs

Soft skills

What we offer

• ▹Training, mentorship and room to grow
• ▹Extra vacation days, sick days and time off when needed
• ▹Fully covered private health insurance in Lithuania and Poland
• ▹Free subscriptions to Calm, Headspace and Mindletic, plus resilience and mindfulness trainings
• ▹In-house gyms, sport cards, online workouts and personal guidance
• ▹Company-wide workation trip abroad
• ▹Work from anywhere
• ▹A gift for milestones: birthdays, weddings and new family members
• ▹Children's summer camps and schedule flexibility
• ▹Team building and company events
• ▹Vilnius HQ with coffee bar, open gyms, kids' room, music room and massage chairs

About the company

Nord Security is creating a safer cyber future: with VPNs, password managers, threat intelligence and eSIMs, it helps people and businesses take back control of their online security, privacy and data.