Application Security Engineer · Mid-Senior · Low-level (Tesonet Global, UAB)

Job description:
At Nord Security, we’re creating a safer cyber future.
We help people and businesses take back control of their online security, privacy, and data. From VPNs to password managers, threat intelligence to eSIMs for travel—our teams turn complex problems into solutions trusted by millions worldwide.
Life is online. In this role, you’ll help people own it.
Conduct security reviews of application designs, source code, and third-party libraries;
Perform regular application vulnerability assessments using both automated tools and manual testing techniques (e.g., SAST, DAST, SCA, penetration testing);
Collaborate with development teams to design secure architectures and implement security controls;
Help maintain security tools, scripts, and processes to support secure development;
Stay current with industry trends, zero-day vulnerabilities, and best practices in application security;
Develop scripts, security automation tools to enhance application security testing processes;
Design and deliver training for security engineering awareness & adoption;
Actively look for internal security gaps within the product or organization overall.
Ensure mobile/desktop applications are sufficiently tested and support internal and external audits;
Requirements:
Proven experience in mobile/desktop application security assessment planning, testing, methodologies, and vulnerability reporting;
Strong understanding of secure coding practices;
Ability to perform manual security code audit;
Proficiency in at least one low-level programming language (e.g. C, C++, Rust, Go).
Solid understanding of networking protocols such as TCP, UDP and the HTTP protocol.
Familiarity with debuggers (e.g. GDB, LLDB, WinDbg).
Familiarity with reverse engineering tools (e.g. Ghidra, IDA).
Solid understanding of memory corruption issues, buffer overflows and related vulnerability classes.
Familiarity with common authentication and authorization protocols (OAuth, SAML, JWT, etc.).
Ability to work with networking tools such as Wireshark, tcpdump.
Ability to quickly assimilate new technologies and tools;
Sense of ownership with strong problem solving and investigation skills;
Ability to build and maintain relationships, influence key stakeholders across the business;
Nice to have
Bonus points for community contributions like public CVEs, bug bounty recognition, open-source tools, blogs, etc.
Company offers:
Sharpen your edge Growth is built into how we work. Extensive online and in-person training programs, access to platforms like Coursera and Skillshare, a mentorship program, and internal career moves when you’re ready for something new — your development has no ceiling here.
Take the time you need Rest isn’t a reward — it’s part of the deal. Enjoy extra vacation days that grow with your time here, plus additional days off for sick leave, special occasions, and parenting.
Get premium healthcare Your health shouldn’t be something you worry about. We provide premium private health…