Application Security Engineer | Mid-Senior | Low-level

The role

You will conduct security reviews of application designs, source code, and third-party libraries. You will perform vulnerability assessments and collaborate with development teams to design secure architectures.

What you will do

• Conduct security reviews of application designs, source code, and third-party libraries
• Perform regular application vulnerability assessments using automated tools and manual testing techniques
• Collaborate with development teams to design secure architectures and implement security controls
• Help maintain security tools, scripts, and processes to support secure development
• Stay current with industry trends, zero-day vulnerabilities, and best practices in application security
• Develop scripts and security automation tools to enhance application security testing processes
• Design and deliver training for security engineering awareness and adoption
• Actively look for internal security gaps within the product or organization overall
• Ensure mobile/desktop applications are sufficiently tested and support internal and external audits

Required qualifications

• Proven experience in mobile/desktop application security assessment planning, testing, methodologies, and vulnerability reporting
• Strong understanding of secure coding practices
• Ability to perform manual security code audit
• Proficiency in at least one low-level programming language (e.g. C, C++, Rust, Go)
• Solid understanding of networking protocols such as TCP, UDP and the HTTP protocol
• Familiarity with debuggers (e.g. GDB, LLDB, WinDbg)
• Familiarity with reverse engineering tools (e.g. Ghidra, IDA)
• Solid understanding of memory corruption issues, buffer overflows and related vulnerability classes
• Familiarity with common authentication and authorization protocols (OAuth, SAML, JWT, etc.)
• Ability to work with networking tools such as Wireshark, tcpdump
• Ability to quickly assimilate new technologies and tools
• Sense of ownership with strong problem solving and investigation skills

Nice to have

• Community contributions like public CVEs, bug bounty recognition, open-source tools, blogs, etc.

Benefits

• Training, mentorship, and room to grow
• Extra vacation days, sick days, and time off
• Private health insurance in Lithuania and Poland — fully covered
• Free subscriptions to Calm, Headspace, and Mindletic
• Resilience and mindfulness trainings
• In-house gyms, sport cards, online workouts, and personal guidance
• Company-wide trip abroad
• Gifts for birthdays, weddings, and new family members
• Children’s summer camps and flexibility around the schedule
• Team building and company events
• Access to Vilnius HQ including coffee bar, open gyms, kids’ room, music room, and massage chairs

Before you apply

• Applications may be processed using automated tools for evaluation purposes
• Candidates remain fully responsible for ensuring submissions reflect their own qualifications

About the company

Nord Security helps people and businesses take back control of their online security, privacy, and data. Their teams turn complex problems into solutions trusted by millions worldwide.