Hybrid Senior Application Security Engineer

at Nord Security

• Job title: Senior Application Security Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Rust, Go
• Location requirements: Hybrid, Bucharest, Romania

About the role

• Join NordVPN's Risk Department as Application Security Engineer conducting mobile/desktop security assessments and collaborating with development teams to enhance security architecture.

Responsibilities

• Conduct security reviews of application designs, source code, and third-party libraries;
• Perform regular application vulnerability assessments using automated tools and manual testing techniques;
• Collaborate with development teams to design secure architectures and implement security controls;
• Help maintain security tools, scripts, and processes to support secure development;
• Stay current with industry trends, zero-day vulnerabilities, and best practices in application security;
• Develop scripts and security automation tools to enhance application security testing processes;
• Design and deliver training for security engineering awareness & adoption;
• Actively look for internal security gaps within the product or organization overall;
• Ensure mobile/desktop applications are sufficiently tested and support internal and external audits;

Requirements

• Proven experience in mobile/desktop application security assessment planning, testing, methodologies, and vulnerability reporting
• Strong understanding of secure coding practices
• Ability to perform manual security code audit
• Proficiency in at least one low-level programming language (e.g. C, C++, Rust, Go)
• Solid understanding of networking protocols such as TCP, UDP and HTTP
• Familiarity with debuggers (e.g. GDB, LLDB, WinDbg)
• Familiarity with reverse engineering tools (e.g. Ghidra, IDA)
• Solid understanding of memory corruption issues, buffer overflows and related vulnerability classes
• Familiarity with common authentication and authorization protocols (OAuth, SAML, JWT, etc.)
• Ability to work with networking tools such as Wireshark and tcpdump
• Ability to quickly assimilate new technologies and tools
• Sense of ownership with strong problem-solving and investigation skills
• Ability to build and maintain relationships, influence key stakeholders across the business
• Bonus points for community contributions like public CVEs, bug bounty recognition, open-source tools, blogs, etc.

Benefits

• Innovate with industry leaders
• Boost your skills via extensive training programs
• Enjoy flexibility with 3 office days and working from home for the remaining 2
• Work from any location when you feel a need to recharge
• Fuel your active lifestyle with online workouts
• Nurture your mind with free psychologist consultations
• Celebrate life’s big moments with special gifts on your birthday, anniversary, etc.
• Experience iconic celebrations, team-buildings, and knowledge-sharing events
• Embark on a legendary company getaway abroad