Application Security Engineer (Senior)

Stack

Responsibilities

• ▹Ensure software design security and define secure implementation practices together with product development teams
• ▹Keep security-related communication between the technical teams involved in releasing the product smooth
• ▹Plan and manage development of security tools within the team
• ▹Create tasks for the product's security reviews (SAST/DAST/SCA results, application security testing, etc.)
• ▹Cooperate with product teams to learn about changes early and make educated security decisions
• ▹Ensure mobile/desktop applications and browser extensions are sufficiently tested
• ▹Support internal and external audits
• ▹Design and deliver training for security engineering awareness and adoption
• ▹Actively look for internal security gaps within the product and the organization
• ▹Address security questions and advise on the direction of the product's security

Requirements

• ▹Proven experience in mobile/desktop applications security assessment: planning, testing, methodologies and vulnerability reporting
• ▹Good understanding of how networks work (OSI and TCP/IP models), with a focus on VPNs
• ▹Experience working with stakeholders to define the scope of security tests and identify remediation actions
• ▹Knowledge of secure coding practices
• ▹Experience with security topics across different OS (Linux, Android, iOS, macOS, Windows)
• ▹Ability to build relationships and influence key stakeholders across the business
• ▹Ability to make product-related business decisions based on threats and vulnerabilities

Soft skills

What we offer

• ▹Work alongside global experts building world-leading cybersecurity tools
• ▹Extensive training programs (online and offline), mentorship and career-switch opportunities within the company
• ▹Modern next-gen office with ergonomic workspaces, events and specialty coffee
• ▹Work from anywhere
• ▹Free 24/7 gym access, onsite and online workouts, consultations with in-house Physical Well-Being experts
• ▹Free psychologist consultations, mental health events and premium access to wellness apps (Calm, Headspace, Mindletic)
• ▹Private health insurance
• ▹Extra vacation days, plus additional days for sick leave, special occasions and parenting needs
• ▹Gifts for birthdays, anniversaries and major life events
• ▹Company events, team-buildings and knowledge-sharing events
• ▹Workation: a company getaway abroad

About the company

Nord Security is the team behind Threat Protection Pro, the NordLynx protocol and NordVPN, helping people take back control of their online security, privacy and data.