Security Engineer – Mid-Senior – WebSec Team

at Nord Security

📍 Poland

PLN 206,400-396,000 per year

MIDDLE SENIOR

✅ Remote

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

Networking @ 3 PKI @ 3 Reporting @ 3 Security @ 3

Details

Join the WebSec Team to help protect millions of users' online security, privacy, and data by working on advanced VPN, privacy, and security products.

Responsibilities

Conduct penetration testing on web and backend applications, networking components, and cryptographic services using white-box, grey-box, and black-box approaches.
Apply reverse engineering skills to identify vulnerabilities during code reviews of security solutions.
Design and create solutions for complex security issues from scratch.
Develop scripts and security automation tools to improve penetration testing processes.
Collaborate with web and backend application developers to validate, assess, and understand the root causes of vulnerabilities and support their mitigation.
Share security knowledge with colleagues.

Requirements

Proven experience conducting application security assessments, including planning, testing, and vulnerability reporting.
Proficiency with security scanners, static code analyzers, and debuggers.
Understanding of networking and cryptographic fundamentals, including TLS, PFS, PKI, and digital certificates.
Demonstrated ability to perform manual security code audits.
Experience with fuzzing, reverse engineering, and exploit development.
Experience collaborating with application developers to validate, assess, understand, and mitigate vulnerabilities.
Strong knowledge of application and infrastructure testing methodologies.
Knowledge of secure architecture design and assessment, including manual penetration testing.
Community contributions such as public CVEs, bug bounty recognition, open-source tools, blogs, or security certifications are considered a bonus.

Benefits

Online and in-person training, access to Coursera and Skillshare, mentorship, and internal career opportunities.
Extra vacation days, sick leave, special occasion leave, and parenting leave.
Premium private health insurance available in Lithuania and Poland.
Subscriptions to Calm, Headspace, and Mindletic, plus resilience, mindfulness, and mental health programs.
In-house gyms, Multisport and Urban Sport cards, online workouts, and physical well-being support.
Company workations, team buildings, company events, and milestone gifts.
Flexible work-from-anywhere options.
Summer camps for children and family-friendly flexibility.
Access to the Vilnius headquarters, including silent rooms, gyms, a game room, a music room, and a coffee bar.