---
title: 'Application Security Engineer | Mid-Senior | iOS at Nord Security'
canonical: 'https://feeny.ai/job/application-security-engineer-mid-senior-ios-nord-security-vilnius-vx75a6sbvwy4'
type: 'job'
last_seen: '2026-11-06'
---

# Application Security Engineer | Mid-Senior | iOS at Nord Security

- **Company:** [Nord Security](https://feeny.ai/companies/nord-security)
- **Location:** Vilnius, Lithuania
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-09-07
- **Last confirmed live:** 2026-11-06
- **Apply:** https://jobs.ashbyhq.com/nord-security/48a3f4fe-0574-4b70-b1b0-9e6e2bbd7ce3

## Job description

At Nord Security, we’re creating a safer cyber future. We help people and businesses take back control of their online security, privacy, and data. From VPNs to password managers, threat intelligence to eSIMs for travel—our teams turn complex problems into solutions trusted by millions worldwide. Life is online. In this role, you’ll help people own it.

Main Responsibilities

- Conduct security reviews of application designs, source code, and third-party libraries/SDKs;
- Perform regular application vulnerability assessments using both automated tools and manual testing techniques (e.g., SAST, DAST, SCA, penetration testing);
- Perform end-to-end security assessments of iOS applications, covering static and dynamic analysis, runtime instrumentation
- Collaborate with development teams to design secure architectures and implement security controls;
- Help maintain security tools, scripts, and processes to support secure development;
- Stay current with industry trends, zero-day vulnerabilities, platform security changes in new iOS releases, and best practices in application security;
- Develop scripts, security automation tools and instrumentation harnesses to enhance mobile application security testing processes;
- Design and deliver training for security engineering awareness & adoption;
- Actively look for internal security gaps within our products
- Ensure mobile applications are sufficiently tested and support internal and external audits, including MASVS-aligned assessments.

Core Requirements

- Proven experience in mobile application security assessment planning, testing, methodologies, and vulnerability reporting, with a focus on iOS;
- Strong understanding of secure coding practices;
- Ability to perform manual security code audit;
- Proficiency in at least one mobile/native programming language (Swift, Objective-C), and comfort reading C/C++ where it appears in dependencies;
- Practical knowledge of the OWASP MASVS and MASTG, and the ability to plan and execute assessments against them;
- Solid understanding of the iOS security model: sandboxing, entitlements, code signing, Keychain, Data Protection classes, App Transport Security, IPC and inter-app communication (URL schemes, universal links, app extensions, app groups);
- Hands-on experience with dynamic instrumentation and mobile testing tooling such as Frida, Objection, MobSF, Burp Suite, mitmproxy and class-dump/otool-style binary inspection;
- Experience bypassing client-side controls such as certificate pinning, jailbreak detection and anti-tampering, and assessing their resilience;
- Solid understanding of networking protocols such as TCP, UDP and the HTTP protocol, including TLS and traffic interception on mobile devices;
- Understanding of insecure data storage, sensitive data leakage (logs, backups, snapshots, pasteboard, caches) and cryptographic misuse in mobile apps;
- Ability to work with networking tools such as Wireshark, tcpdump;
- Familiarity with iOS reverse engineering and debugging tooling (e.g. Ghidra, IDA, Hopper, LLDB);
- Ability to quickly assimilate new technologies and tools;
- Sense of ownership with strong problem solving and investigation skills;
- Ability to build and maintain relationships, influence key stakeholders across the business;
- Bonus points for community contributions like public CVEs, bug bounty recognition, open-source tools, blogs, etc.

## Nice to have

- Familiarity with Android application security, to allow cross-platform coverage;
- Familiarity with fuzzing tools and fuzzing techniques.

## What We Offer

- Sharpen your edge: training, mentorship, and room to grow — always.
- Take the time you need: extra vacation days, sick days, and time off when life calls.
- Get premium healthcare: private health insurance in Lithuania and Poland — fully covered.
- Protect your peace: enjoy free subscriptions to Calm, Headspace, and Mindletic, and our own resilience and mindfulness trainings.
- Own your fitness: in-house gyms, sport cards, online workouts, and personal guidance — on us.
- Pack your bags for workation: experience our company-wide trip abroad to the fullest.
- Work from anywhere: work from wherever keeps you in the zone.
- Celebrate your milestones: birthdays, weddings, and new family members — all deserve a gift.
- Parent with ease: children’s summer camps and flexibility around the schedule — because parenting never pauses.
- Join the party: team building and company events people talk about for months.
- Unlock Cyber City: coffee bar, open gyms, kids’ room, music room, massage chairs — our Vilnius HQ is yours to enjoy.

Kindly refer to our [Privacy Notice for Recruitment Candidates](https://drive.google.com/file/d/1b2tV684_SYV1jQ4kuf91cnzrRBk3ef-5/view) for comprehensive information regarding our data handling procedures throughout recruitment processes. We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance. By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter. If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.

## About Nord Security

## Company Overview
- **One-liner**: Nord Security is a global provider of digital security and privacy solutions for individuals and businesses, best known for its flagship product NordVPN.
- **Entity Type**: Private (funding: $209M, raised at unicorn valuation of $1.6B in 2022)
- **Headquarters**: London, United Kingdom (operational HQ in Vilnius, Lithuania)
- **Founded**: 2012
- **Founders**: Tom Okman and Eimantas Sabaliauskas

## Core Business
- **Primary industry**: Cybersecurity (computer and network security)
- **Target customers**: Both B2C (individuals) and B2B (businesses of all sizes)
- **Mission statement**: “Shape a more trusted and peaceful online future for people everywhere.”

## Products & Services
- **NordVPN** – World’s fastest VPN, encrypts online traffic and protects privacy with next-generation encryption. (SaaS)
- **NordLayer** – Adaptive network access security solution for modern businesses, helping organizations scale securely. (SaaS)
- **NordPass** – Password manager built with zero-knowledge encryption, focused on simplicity and security. (SaaS)
- **NordStellar** – Threat exposure management solution that detects and responds to cyber threats before they escalate. (SaaS, launched 2024)
- **NordLocker** – End-to-end encrypted file storage and sharing tool with secure cloud backup. (SaaS)
- **Saily** – Global eSIM service that helps travelers stay connected affordably while roaming. (Service, launched 2024)

## Market Standing
- **Valuation/Market Cap**: $1.6B (achieved unicorn status in 2022); second tech unicorn from Lithuania.
- **Key Metric**: Annual Revenue ~$50M (LinkedIn estimate); Total Funding $209M.
- **Notable Investors/Partners**: Warburg Pincus (led 2023 round), Novator (led 2022 round), Surfshark (parent company).
- **Growth Signals**: Headcount of 1,482 (+16.3% YoY); operates in 24 countries; launched three new products in 2024 (NordStellar, Saily, Coveron); acquired Atlas VPN in 2021; active job postings up 19.6% YoY.

## Competitive Advantages
- **Comprehensive ecosystem** – Integrates VPN, password management, file encryption, network access security, and threat exposure in one brand.
- **Award-winning products** – Consistently praised by cybersecurity experts and top media.
- **Global scale** – Millions of users worldwide, presence across North America, Europe, Africa, Asia, and Australia.
- **Strong brand trust** – High retention, 4.4/5 employer rating on Glassdoor, 84% CEO approval.

## Strategic Focus
- Expanding product suite into adjacent cybersecurity areas (threat management, eSIM services).
- Strengthening B2B offerings with NordLayer and NordStellar.
- Maintaining rapid headcount growth and global office expansion.
- Continuing investment in R&D and threat intelligence.

## Why Work Here
- **Culture values**: “Restless achievers,” “Self-movers,” “Team players,” “Future shapers” – entrepreneurial and ownership-driven environment.
- **Work flexibility**: “Work from anywhere” policy – employees can work remotely or from global offices.
- **Perks & benefits**: Private health insurance, free psychologist consultations, premium wellness apps (Calm, Headspace), 24/7 gym access, extra annual leave and sick days, extensive training & mentorship programs.
- **Engineering culture**: Large technical team (668 employees in technical roles), opportunities to work on cutting-edge cybersecurity tools impacting millions of users.
- **Employee satisfaction**: 4.4/5 on Glassdoor (80% would recommend to a friend); strong work-life balance (4.5) and career opportunities (4.3).

## Sources
1. [nordsecurity.com](https://nordsecurity.com/about-us)
2. [linkedin.com](https://www.linkedin.com/company/nordsecurity)
3. [glassdoor.com](https://www.glassdoor.com/Overview/Working-at-Nord-Security-EI_IE4015819.11,24.htm)
4. [builtin.com](https://builtin.com/company/nord-security)
5. [nordsecurity.com/careers](https://nordsecurity.com/careers)

## Other roles at Nord Security

- [Core Network Architect - Advisor (Contract) | Senior | Saily](https://feeny.ai/job/core-network-architect-advisor-contract-senior-saily-nord-security-vilnius-2kptvywr8z3w) — Vilnius, Lithuania
- [Lead Retention Data Analyst](https://feeny.ai/job/lead-retention-data-analyst-nord-security-vilnius-qk3bhk8s5g2a) — Vilnius, Lithuania
- [PR Manager | Mid-Senior](https://feeny.ai/job/pr-manager-mid-senior-nord-security-vilnius-f4fvhvfb4g3g) — Vilnius, Lithuania
- [Product Designer | Mid-Senior](https://feeny.ai/job/product-designer-mid-senior-nord-security-vilnius-r875dz151a09) — Vilnius, Lithuania
- [CRO Manager | Mid-Senior | B2B Suite](https://feeny.ai/job/cro-manager-mid-senior-b2b-suite-nord-security-warsaw-52gxfmcacnkj) — Warsaw, Poland
- [Backend Engineer | Senior | Saily](https://feeny.ai/job/backend-engineer-senior-saily-nord-security-poland-z07tn5a3x0qh) — Poland
- [Copywriter | German | Junior](https://feeny.ai/job/copywriter-german-junior-nord-security-berlin-7sk8zd1dpzvp) — Berlin, Germany
- [National Account Manager | Indirect Sales Channel | Mid-Senior](https://feeny.ai/job/national-account-manager-indirect-sales-channel-mid-senior-nord-security-france-q6q4q1r3zg7n) — France
- [Engineering Manager | Mid-Senior | Saily](https://feeny.ai/job/engineering-manager-mid-senior-saily-nord-security-vilnius-td15r79ekmee) — Vilnius, Lithuania
- [Sales Enablement Manager | Mid-Senior | B2B](https://feeny.ai/job/sales-enablement-manager-mid-senior-b2b-nord-security-vilnius-fy5dq3wfsb43) — Vilnius, Lithuania