Application Security Engineer (Senior)

Stack

Responsibilities

• ▹Ensure software design security and define secure implementation practices by syncing with the teams responsible for product development
• ▹Ensure security-related communication between technical teams involved in releasing the product is smooth
• ▹Plan and manage development of security tools within the team
• ▹Create tasks for the product's security reviews (SAST/DAST/SCA results, application security testing)
• ▹Cooperate with product teams to learn about changes early and make educated security decisions
• ▹Ensure mobile/desktop applications and browser extensions are sufficiently tested
• ▹Support internal and external audits
• ▹Design and deliver training for security engineering awareness and adoption
• ▹Actively look for internal security gaps within the product or organization
• ▹Address security questions and give advice regarding the direction of the product's security

Requirements

• ▹Proven experience in mobile/desktop application security assessment: planning, testing, methodologies and vulnerability reporting
• ▹Good understanding of how networks work (OSI and TCP/IP models) with a particular focus on VPNs
• ▹Experience working with stakeholders to define the scope of security tests and identify remediation actions
• ▹Knowledge of secure coding practices
• ▹Sense of ownership with strong problem-solving and investigation skills
• ▹Experience with security topics across different OS (Linux, Android, iOS, macOS, Windows)
• ▹Ability to build and maintain relationships and influence key stakeholders across the business
• ▹Ability to make product-related business decisions based on threats and vulnerabilities
• ▹A healthy dose of assertiveness combined with an ability to compromise

Soft skills

What we offer

• ▹Training, mentorship and room to grow
• ▹Extra vacation days, sick days and time off when needed
• ▹Fully covered private health insurance in Lithuania and Poland
• ▹Free subscriptions to Calm, Headspace and Mindletic, plus resilience and mindfulness trainings
• ▹In-house gyms, sport cards, online workouts and personal guidance
• ▹Company-wide trip abroad (workation)
• ▹Work from anywhere
• ▹Gifts for birthdays, weddings and new family members
• ▹Children's summer camps and schedule flexibility
• ▹Team building and company events
• ▹Vilnius HQ with coffee bar, open gyms, kids' room, music room and massage chairs

About the company

Nord Security is the team behind Threat Protection Pro, the NordLynx protocol and one of the fastest VPNs, helping people take back control of their online security, privacy and data.