Application Security Engineer | Senior

Details

The world’s most advanced VPN, and a whole lot more.

If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands.

Your impact? Helping millions take back control of their online security, privacy, and data.

Responsibilities

• Ensure software design security and define secure implementation practices by syncing with teams responsible for the actual product development.
• Ensure that security-related communication between technical teams involved in releasing the product is smooth (act as a “glue” between all teams so everyone’s on the same page).
• Develop scripts and security automation tools (e.g. for JIRA and GitLab) to enhance application security testing processes.
• Create tasks for the product's security reviews (SAST/DAST/SCA results, application security testing, etc.).
• Cooperate with product teams to learn about changes introduced into the product early to make educated security decisions.
• Ensure mobile/desktop applications and browser extensions are sufficiently tested.
• Support internal and external audits.
• Design and deliver training for security engineering awareness & adoption.
• Actively look for internal security gaps within the product or organization overall.
• Address security questions and give advice regarding the direction of the product's security.

Requirements

• Proven experience in mobile and desktop applications security assessment: planning, testing, methodologies, and vulnerability reporting.
• Good understanding of how networks work (OSI and TCP/IP models) with a particular focus on VPNs.
• Experience working with stakeholders to define the scope of security tests and identify remediation actions for vulnerabilities.
• Knowledge of secure coding practices, particularly differences and security considerations between low-level languages such as C, C++, and Rust.
• Experience with security topics across different OSes: Linux, Android, iOS, macOS, Windows.
• Sense of ownership with strong problem-solving and investigation skills.
• Ability to build and maintain relationships and influence key stakeholders across the business.
• Ability to make product-related business decisions based on threats and vulnerabilities affecting it.
• A healthy dose of assertiveness combined with an ability to compromise.

Compensation

• Gross salary: 5400 - 6300 EUR / month (gross).

Additional

• Support for internal and external audits and delivery of security training are part of the role.