Application Security Engineer · Mid-Senior · Low-Level

📍 Vilnius, Lithuania
📍 Kaunas, Lithuania

EUR 38,400-75,600 per year

MIDDLE SENIOR

✅ Hybrid

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

Go @ 5 HTTP @ 3 JWT @ 2 Manual Testing Networking @ 3 OAuth @ 2 Reporting @ 3 Rust @ 5 Security @ 3

At Nord Security, you’ll help create a safer cyber future by securing applications used by people and businesses worldwide.

Conduct security reviews of application designs, source code, and third-party libraries.
Perform regular application vulnerability assessments using automated tools and manual testing techniques, including SAST, DAST, SCA, and penetration testing.
Collaborate with development teams to design secure architectures and implement security controls.
Maintain security tools, scripts, and processes that support secure development.
Stay current with industry trends, zero-day vulnerabilities, and application security best practices.
Develop scripts and security automation tools to improve application security testing processes.
Design and deliver security engineering awareness and adoption training.
Identify internal security gaps within products and the organization.
Ensure mobile and desktop applications are sufficiently tested.
Support internal and external audits.

Proven experience planning and performing mobile and desktop application security assessments, testing, applying methodologies, and reporting vulnerabilities.
Strong understanding of secure coding practices.
Ability to perform manual security code audits.
Proficiency in at least one low-level programming language, such as C, C++, Rust, or Go.
Solid understanding of networking protocols, including TCP, UDP, and HTTP.
Familiarity with debuggers such as GDB, LLDB, and WinDbg.
Familiarity with reverse engineering tools such as Ghidra and IDA.
Solid understanding of memory corruption issues, buffer overflows, and related vulnerability classes.
Familiarity with authentication and authorization protocols such as OAuth, SAML, and JWT.
Ability to work with networking tools such as Wireshark and tcpdump.
Ability to quickly learn new technologies and tools.
Strong ownership, problem-solving, and investigation skills.
Ability to build and maintain relationships and influence key stakeholders across the business.
Community contributions such as public CVEs, bug bounty recognition, open-source tools, or technical blogs are a bonus.

Extensive online and in-person training, access to Coursera and Skillshare, mentorship, and internal career opportunities.
Additional vacation days, sick leave, special-occasion leave, and parenting leave.
Premium private health insurance in Lithuania and Poland.
Free subscriptions to Calm, Headspace, and Mindletic, plus resilience and mindfulness training and mental health events.
In-house gyms, Multisport and Urban Sport cards, online workouts, and physical well-being support.
Company workation opportunities.
The option to work from different locations.
Gifts for birthdays, work anniversaries, weddings, and new family members.
Summer camps for children and flexible working arrangements for parents.
Team-building activities and company events.
Access to Nord Security’s Vilnius headquarters, including silent rooms, gyms, a game room, a music room, and a coffee bar.