Application Security Engineer | Senior | macOS

Details

The world’s most advanced VPN, and a whole lot more.

If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands.

Your impact? Helping millions take back control of their online security, privacy, and data.

Risk Department plays a vital role in protecting the organization, ensuring resilience and security across all operations. By assessing risks, ensuring compliance, and managing security audits, this team helps build a strong and trustworthy foundation.

Responsibilities

• Ensure software design security and define secure implementation practices.
• Determine threat models, perform risk analysis and mitigation workshops for product changes that may impact security.
• Use reverse engineering skills to discover security bugs in desktop/mobile applications, networking, and crypto components.
• Develop scripts and security automation tools to enhance application security testing processes.
• Perform application security scanning using SAST and DAST tools.
• Ensure mobile and desktop applications are sufficiently tested and support internal and external audits.
• Design and deliver training for security engineering awareness and adoption.
• Actively look for internal security gaps within the product or organization overall.

Requirements

• Proven experience in mobile and desktop application security assessment planning, testing, methodologies, and vulnerability reporting.
• Proficiency using security scanners, fuzzers, static code analyzers, debuggers, and the ability to perform manual security code audits.
• Experience working with stakeholders to define the scope of security tests and identify remediation actions for discovered vulnerabilities.
• Knowledge of secure coding practices.
• Ability to quickly assimilate new technologies and tools.
• Strong problem-solving and investigation skills with a sense of ownership.
• Experience with Apple operating systems (macOS, iOS).
• Ability to build and maintain relationships and influence key stakeholders across the business.
• Bonus: community contributions such as public CVEs, bug bounty recognition, open-source tools, or security blogs.

Benefits

• Compensation: Gross Salary 22,900 - 32,900 PLN / Month.
• Workplace: Hybrid (Warsaw).
• Team: Cybersecurity / Risk Department at NordVPN, working on products such as Threat Protection Pro and the NordLynx protocol.