Security Engineer | Mid - Senior | WebSec Team
- Role
- Security
- Experience
- Senior
- Employment
- Full-time
Open to PL only. Set where you work from to check your eligibility.
No BS summary
Mid to Senior Security Engineer with web application penetration testing experience. Must be proficient with security scanners, debuggers, and manual code audits. Knowledge of networking and crypto fundamentals is required. Experience with fuzzing, reverse engineering, and exploit development is a plus.
Core skills
Required skills
Optional skills
The world’s most advanced VPN, and a whole lot more.
If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands.
Your impact? Helping millions take back control of their online security, privacy, and data.
Main Responsibilities
- Conduct penetration testing on web and backend applications, networking components, and crypto services. White, grey box, or black box – you name it!
- Show your reverse engineering skills in finding bugs during code review of cutting-edge security solutions.
- Design and create solutions to handle complex security issues from scratch;
- Develop scripts and security automation tools to enhance penetration testing processes.
- Closely collaborate with web and backend application developers, other tech geeks, to validate, assess, and understand the root cause of vulnerabilities, and work on their mitigation.
- Spread your security knowledge with hundreds of your colleagues!
Core Requirements
- Proven experience in conducting application security assessments, including planning, testing, and vulnerability reporting;
- Proficiency using security scanners, static code analyzers, and debuggers;
- Understanding of networking and cryptographic fundamentals such as TLS, PFS, PKI, and digital certificates.
- Demonstrated ability to perform manual security code audits;
- Previous experience with fuzzing, reverse engineering, and exploit development.
- Experience working with application developers to validate, assess, understand the root cause, and mitigate vulnerabilities;
- Strong knowledge in application and infrastructure testing methodologies;
- Knowledge in secure architecture design and assessment (manual approach to penetration testing);
- Bonus points for community contributions like public CVEs, bug bounty recognition, open-source tools, blogs, certificates etc.
WHAT WE OFFER
Innovate with industry leaders
Work alongside global experts to build world-leading cybersecurity tools, impacting millions of users around the world.
Learn & grow
Boost your skills via our extensive training programs (online and offline) & other resources. Benefit from mentorship and career-switch opportunities to grow within the company.
Work from anywhere
Recharge with a change of scenery – choose work from any location when you feel a need to power your creativity and drive.
Physical well-being
Fuel your active lifestyle with online workouts led by our Physical Well-Being experts. Unlock a variety of sports and wellness facilities, like gyms, swimming pools, and fitness classes, with the Multisport card.
Mental & emotional health
Nurture your mind with free psychologist consultations, dedicated mental health events, and premium access to top-rated wellness apps like Calm, Headspace, and Mindletic.
Premium healthcare
Receive private health insurance giving you peace of mind for your health needs.
Joyful moments – special treats
Celebrate life’s big moments with special gifts from us on your birthday, anniversary, and other major events, such as weddings or the arrival of a new family member.
Company events & team-building
Experience iconic Nord Security celebrations, team-buildings, and knowledge-sharing events, nurturing bonds that fuel our success.
Workation
Embark on a legendary company getaway abroad, filled with exciting activities, live concerts, engaging workshops, and epic time together.
We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance.
By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter.
If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.
What you'll do
- Conduct penetration testing on web and backend applications, networking components, and crypto services. White, grey box, or black box – you name it!
- Show your reverse engineering skills in finding bugs during code review of cutting-edge security solutions.
- Design and create solutions to handle complex security issues from scratch;
- Develop scripts and security automation tools to enhance penetration testing processes.
- Closely collaborate with web and backend application developers, other tech geeks, to validate, assess, and understand the root cause of vulnerabilities, and work on their mitigation.
- Spread your security knowledge with hundreds of your colleagues!
What they require
- Proven experience in conducting application security assessments, including planning, testing, and vulnerability reporting;
- Proficiency using security scanners, static code analyzers, and debuggers;
- Understanding of networking and cryptographic fundamentals such as TLS, PFS, PKI, and digital certificates.
- Demonstrated ability to perform manual security code audits;
- Previous experience with fuzzing, reverse engineering, and exploit development.
- Experience working with application developers to validate, assess, understand the root cause, and mitigate vulnerabilities;
- Strong knowledge in application and infrastructure testing methodologies;
- Knowledge in secure architecture design and assessment (manual approach to penetration testing);
- Bonus points for community contributions like public CVEs, bug bounty recognition, open-source tools, blogs, certificates etc.
Benefits
- Work alongside global experts to build world-leading cybersecurity tools, impacting millions of users around the world.
- Boost your skills via our extensive training programs (online and offline) & other resources. Benefit from mentorship and career-switch opportunities to grow within the company.
- Choose work from any location when you feel a need to power your creativity and drive.
- Fuel your active lifestyle with online workouts led by our Physical Well-Being experts. Unlock a variety of sports and wellness facilities, like gyms, swimming pools, and fitness classes, with the Multisport card.
- Nurture your mind with free psychologist consultations, dedicated mental health events, and premium access to top-rated wellness apps like Calm, Headspace, and Mindletic.
- Receive private health insurance giving you peace of mind for your health needs.
- Celebrate life’s big moments with special gifts from us on your birthday, anniversary, and other major events, such as weddings or the arrival of a new family member.
- Experience iconic Nord Security celebrations, team-buildings, and knowledge-sharing events, nurturing bonds that fuel our success.
- Embark on a legendary company getaway abroad, filled with exciting activities, live concerts, engaging workshops, and epic time together.
Nord Security creates cybersecurity, privacy, and data products including VPNs, password managers, threat intelligence, and eSIMs for travel, trusted by millions worldwide.
What people say about this company
4.3/ 5