App Security Engineer — Mid/Senior, Secure Coding

Nord Security; Poland; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Training & mentorship

Extra vacation days

Private healthcare in Lithuania and, (

Mindfulness trainings

In-house gyms and sport cards

Workation opportunities

Work from anywhere

Job summary

Nord Security is seeking a security engineer to conduct security reviews of mobile and desktop apps, perform vulnerability assessments, and collaborate with development teams to design secure architectures. You will maintain security tooling, stay current on threats, and help deliver security trainings.

The role emphasizes hands-on testing, tooling, and cross-team collaboration. You will also help identify internal security gaps and ensure tests align with audits, while applying best practices

Qualifications

• Proven experience in mobile/desktop application security assessment planning, testing, methodologies, and vulnerability reporting.
• Strong understanding of secure coding practices.
• Ability to perform manual security code audit.
• Proficiency in at least one low-level programming language (e.g. C, C++, Rust, Go).
• Solid understanding of networking protocols such as TCP, UDP and the HTTP protocol.
• Familiarity with debuggers (e.g. GDB, LLDB, WinDbg).
• Familiarity with reverse engineering tools (e.g. Ghidra, IDA).
• Solid understanding of memory corruption issues, buffer overflows and related vulnerability classes.
• Familiarity with common authentication and authorization protocols (OAuth, SAML, JWT, etc.).
• Ability to work with networking tools such as Wireshark, tcpdump.

Responsibilities

• Conduct security reviews of application designs, source code, and third-party libraries.
• Perform regular application vulnerability assessments using both automated tools and manual testing techniques (e.g., SAST, DAST, SCA, penetration testing).
• Collaborate with development teams to design secure architectures and implement security controls.
• Help maintain security tools, scripts, and processes to support secure development.
• Stay current with industry trends, zero-day vulnerabilities, and best practices in application security.
• Develop scripts, security automation tools to enhance application security testing processes.
• Design and deliver training for security engineering awareness & adoption.
• Actively look for internal security gaps within the product or organization overall.
• Ensure mobile/desktop applications are sufficiently tested and support internal and external audits.

Skills

App security testing

Secure coding

Manual security audit

Low-level languages (C/C++/Rust/Go)

Networking protocols TCP/UDP/HTTP

Debuggers (GDB/LLDB/WinDbg)

Reverse engineering tools (Ghidra/IDA)

OAuth/SAML/JWT

Wireshark/tcpdump

Problem solving & ownership

Tools

Ghidra

IDA

Wireshark

tcpdump

GDB

LLDB

WinDbg

Job description

Nord Security is seeking a security engineer to conduct security reviews of mobile and desktop apps, perform vulnerability assessments, and collaborate with development teams to design secure architectures. You will maintain security tooling, stay current on threats, and help deliver security trainings.

The role emphasizes hands-on testing, tooling, and cross-team collaboration. You will also help identify internal security gaps and ensure tests align with audits, while applying best practices