Application Security Engineer | Senior at Nord Security (Poland)
Nord Security· Poland· PLN 23k–PLN 30k·
Role details
Extensive Training Programs · Mentorship · Career-Switch Opportunities · Hybrid Work Model · Work From Anywhere Flexibility · Online Workouts · Multisport Card Access · Free Psychologist Consultations
Nord Security at a glance
Nord Security is a global provider of digital security and privacy solutions for individuals and businesses, best known for its flagship product NordVPN.
Nord Security is a Lithuanian cybersecurity company that sells digital privacy and security as a family of consumer and business apps, best known for its flagship VPN, NordVPN. Its suite spans VPN, password management, encrypted storage, business network access, threat intelligence, eSIM, and identity theft protection.
$209M raised · latest: Growth · $100M · Sep 2023 (led by Warburg Pincus, at a $3B valuation) · backed by Warburg Pincus, Novator, Burda Principal Investments
Summary
Senior Application Security Engineer responsible for ensuring software design security, managing security tool development, and conducting security reviews for mobile, desktop, and browser applications. Acts as a liaison between technical teams to drive secure implementation practices and support audits.
Job description
The world’s most advanced VPN, and a whole lot more.
If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands.
Your impact? Helping millions take back control of their online security, privacy, and data.
Main Responsibilities
- Ensure software design security and define secure implementation practices by syncing with teams responsible for the actual product development.
- Ensure that security-related communication between technical teams involved in releasing the product is smooth (act as a “glue” between all teams so everyone’s on the same page);
- Plan and manage development of security tools within the team;
- Create tasks for the product's security reviews (SAST/DAST/SCA results, application security testing, etc.).
- Cooperate with product teams to learn about changes introduced into the product early to make educated security decisions.
- Ensure mobile/desktop applications and browser extensions are sufficiently tested.
- Support internal and external audits;
- Design and deliver training for security engineering awareness & adoption.
- Actively look for internal security gaps within the product or organization overall.
- Address security questions and give advice regarding the direction of the product's security.
Core Requirements
- Proven experience in mobile/desktop applications security assessment: planning, testing, methodologies, and vulnerability reporting;
- Good understanding of how networks work (OSI and TCP/IP models) with a particular focus on VPNs;
- Experience working with stakeholders to define the scope of security tests and identify remediation actions to address any vulnerabilities identified;
- Knowledge of secure coding practices;
- Sense of ownership with strong problem-solving and investigation skills;
- Experience with different OS (Linux, Android, iOS, macOS, Windows) security topics;
- Ability to build and maintain relationships, influence key stakeholders across the business;
- Ability to make product-related business decisions based on threats and vulnerabilities affecting it;
- A healthy dose of assertiveness combined with an ability to compromise.
WHAT WE OFFER
- Sharpen your edge: training, mentorship, and room to grow — always.
- Take the time you need: extra vacation days, sick days, and time off when life calls.
- Get premium healthcare: private health insurance in Lithuania and Poland — fully covered.
- Protect your peace: enjoy free subscriptions to Calm, Headspace, and Mindletic, and our own resilience and mindfulness trainings.
- Own your fitness: in-house gyms, sport cards, online workouts, and personal guidance — on us.
- Pack your bags for workation: experience our company-wide trip abroad to the fullest.
- Work from anywhere: work from wherever keeps you in the zone.
- Celebrate your milestones: birthdays, weddings, and new family members — all deserve a gift.
- Parent with ease: children’s summer camps and flexibility around the schedule — because parenting never pauses.
- Join the party: team building and company events people talk about for months.
- Unlock Cyber City: coffee bar, open gyms, kids’ room, music room, massage chairs — our Vilnius HQ is yours to enjoy.
Kindly refer to our Privacy Notice for Recruitment Candidates drive.google.com/view for comprehensive information regarding our data handling procedures throughout recruitment processes.
We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance.
By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter.
If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.
Why work at Nord Security
- Culture values: “Restless achievers,” “Self-movers,” “Team players,” “Future shapers” – entrepreneurial and ownership-driven environment.
- Work flexibility: “Work from anywhere” policy – employees can work remotely or from global offices.
- Perks & benefits: Private health insurance, free psychologist consultations, premium wellness apps (Calm, Headspace), 24/7 gym access, extra annual leave and sick days, extensive training & mentorship programs.
- Engineering culture: Large technical team (668 employees in technical roles), opportunities to work on cutting-edge cybersecurity tools impacting millions of users.
- Employee satisfaction: 4.4/5 on Glassdoor (80% would recommend to a friend); strong work-life balance (4.5) and career opportunities (4.3).