Application Security Engineer (Mid-Senior, Low-level)

Stack

Responsibilities

• ▹Conduct security reviews of application designs, source code and third-party libraries
• ▹Perform regular application vulnerability assessments with automated tools and manual techniques (SAST, DAST, SCA, penetration testing)
• ▹Collaborate with development teams to design secure architectures and implement security controls
• ▹Help maintain security tools, scripts and processes that support secure development
• ▹Stay current with industry trends, zero-day vulnerabilities and application security best practices
• ▹Develop scripts and security automation tools to enhance application security testing
• ▹Design and deliver training for security engineering awareness and adoption
• ▹Actively look for internal security gaps within the product or organization
• ▹Ensure mobile/desktop applications are sufficiently tested and support internal and external audits

Requirements

• ▹Proven experience in mobile/desktop application security assessment planning, testing, methodologies and vulnerability reporting
• ▹Strong understanding of secure coding practices
• ▹Ability to perform manual security code audit
• ▹Proficiency in at least one low-level programming language (e.g. C, C++, Rust, Go)
• ▹Solid understanding of networking protocols such as TCP, UDP and HTTP
• ▹Familiarity with debuggers (GDB, LLDB, WinDbg)
• ▹Familiarity with reverse engineering tools (Ghidra, IDA)
• ▹Solid understanding of memory corruption issues, buffer overflows and related vulnerability classes
• ▹Familiarity with authentication and authorization protocols (OAuth, SAML, JWT)
• ▹Ability to work with networking tools such as Wireshark and tcpdump
• ▹Ability to quickly assimilate new technologies and tools

Nice to have

• ▹Community contributions such as public CVEs, bug bounty recognition, open-source tools, blogs

Soft skills

What we offer

• ▹Training, mentorship and room to grow
• ▹Extra vacation days, sick days and time off
• ▹Fully covered private health insurance in Lithuania and Poland
• ▹Free Calm, Headspace and Mindletic subscriptions, plus resilience and mindfulness trainings
• ▹In-house gyms, sport cards, online workouts and personal guidance
• ▹Company-wide workation trip abroad
• ▹Work from anywhere
• ▹Gifts for birthdays, weddings and new family members
• ▹Children's summer camps and schedule flexibility
• ▹Team building and company events
• ▹Vilnius HQ facilities: coffee bar, open gyms, kids' room, music room, massage chairs

About the company

Nord Security is creating a safer cyber future, with VPNs, password managers, threat intelligence and travel eSIMs trusted by millions worldwide. Its HQ is in Vilnius.