Application Security Engineer - Senior

📍 Poland

PLN 276,000-360,000 per year

SENIOR

✅ Remote

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

Android @ 4 Linux @ 4 Networking @ 4 Reporting @ 4 Security @ 4 iOS @ 4 macOS @ 4

Join the team behind Threat Protection Pro, the NordLynx protocol, and privacy and security products used by millions of people.

Ensure software design security and define secure implementation practices in collaboration with product development teams.
Facilitate security-related communication between technical teams involved in product releases.
Plan and manage the development of security tools within the team.
Create tasks based on product security reviews, including SAST, DAST, SCA, and application security testing results.
Cooperate with product teams to understand product changes early and make informed security decisions.
Ensure mobile and desktop applications and browser extensions are sufficiently tested.
Support internal and external audits.
Design and deliver security engineering awareness and adoption training.
Identify internal security gaps within products and the organization.
Address security questions and advise on product security direction.

Proven experience in mobile and desktop application security assessment, including planning, testing, methodologies, and vulnerability reporting.
Good understanding of networking, including the OSI and TCP/IP models, with a particular focus on VPNs.
Experience working with stakeholders to define the scope of security tests and identify remediation actions for vulnerabilities.
Knowledge of secure coding practices.
Strong ownership, problem-solving, and investigation skills.
Experience with security topics across Linux, Android, iOS, macOS, and Windows.
Ability to build and maintain relationships and influence key stakeholders across the business.
Ability to make product-related business decisions based on threats and vulnerabilities.
Assertiveness combined with an ability to compromise.

Extensive online and in-person training, access to Coursera and Skillshare, mentorship, and internal career opportunities.
Additional vacation days, sick leave, special-occasion leave, and parenting leave.
Premium private health insurance in Lithuania and Poland.
Calm, Headspace, and Mindletic subscriptions, resilience and mindfulness training, and mental health events.
In-house gyms, Multisport and Urban Sport cards, online workouts, and physical well-being support.
Company workations, remote work flexibility, milestone gifts, parenting support, summer camps, team buildings, and company events.
Access to the Vilnius headquarters, including silent rooms, gyms, a game room, music room, and coffee bar.