Security Engineer | Mid - Senior | WebSec Team

Nord Security; Poland; On-site; PLN 191,952 - 368,280; Full time

Benefits offered by this job

Private health insurance

Online workouts with experts

Flexible work from anywhere

Career development and mentoring opportunities

Team-building events and celebrations

Job summary

A leading cybersecurity firm in Poland is seeking a Security Engineer to conduct penetration testing and enhance security solutions. You will work on complex security issues, develop automation tools, and collaborate closely with developers to mitigate vulnerabilities. Ideal candidates should have proven experience in application security assessments and proficiency with security scanners. This role offers a gross salary range of 17,200 - 33,000 PLN per month, with flexible hybrid working conditions.

Qualifications

• Proven experience conducting application security assessments.
• Proficiency using security scanners and debugging tools.
• Strong knowledge of TLS, PFS, and PKI.

Responsibilities

• Conduct penetration testing on web and backend applications.
• Perform code reviews to identify bugs in security solutions.
• Develop scripts and security automation tools.

Skills

Application security assessment

Security scanners expertise

Networking fundamentals

Manual security code audits

Fuzzing experience

Reverse engineering

Mitigation of vulnerabilities

Testing methodologies

Secure architecture design

Job description

At Nord Security, we're creating a safer cyber future.

We help people and businesses take back control of their online security, privacy, and data. From VPNs to password managers, threat intelligence to eSIMs for travel-our teams turn complex problems into solutions trusted by millions worldwide.

Life is online. In this role, you'll help people own it.

Main Responsibilities

• Conduct penetration testing on web and backend applications, networking components, and crypto services. White, grey box, or black box - you name it!
• Show your reverse engineering skills in finding bugs during code review of cutting‑edge security solutions.
• Design and create solutions to handle complex security issues from scratch;
• Develop scripts and security automation tools to enhance penetration testing processes.
• Closely collaborate with web and backend application developers, other tech geeks, to validate, assess, and understand the root cause of vulnerabilities, and work on their mitigation.
• Spread your security knowledge with hundreds of your colleagues!

Core Requirements

• Proven experience in conducting application security assessments, including planning, testing, and vulnerability reporting;
• Proficiency using security scanners, static code analyzers, and debuggers;
• Understanding of networking and cryptographic fundamentals such as TLS, PFS, PKI, and digital certificates.
• Demonstrated ability to perform manual security code audits;
• Previous experience with fuzzing, reverse engineering, and exploit development.
• Experience working with application developers to validate, assess, understand the root cause, and mitigate vulnerabilities;
• Strong knowledge in application and infrastructure testing methodologies;
• Knowledge in secure architecture design and assessment (manual approach to penetration testing);
• Bonus points for community contributions like public CVEs, bug bounty recognition, open‑source tools, blogs, certificates etc.

Salary Range

• Gross Salary 17200 - 33,000 PLN/Month.

About Us

Nord Security is a global leader in internet privacy and security solutions and Lithuania's second tech unicorn. Established in 2012, Nord Security now has more than 1400 employees and serves millions of users worldwide. Our team has a global mission to shape a more secure and peaceful online future for people everywhere. With that in mind, we built several advanced cybersecurity solutions: NordVPN, NordLayer, NordLocker, NordPass, NordProtect, NordStellar, and Saily.

NordVPN is the world's most advanced VPN service provider, used by millions of internet users worldwide. NordVPN provides double VPN encryption and Onion Over VPN and guarantees privacy with zero tracking. One of the key features of the product is Threat Protection, which blocks malicious websites, malware, trackers, and ads. NordVPN is very user friendly, offers one of the best prices on the market, and has over 5,000 servers in 59 countries worldwide.

Future Shapers

• Future shapers
• Restless achievers
• Self‑movers
• Honest communicators
• Team players

What We Offer

Innovate with industry leaders

Work alongside global experts to build world‑leading cybersecurity tools, impacting millions of users around the world.

Learn & grow

Boost your skills via our extensive training programs (online and offline) & other resources. Benefit from mentorship and career‑switch opportunities to grow within the company.

Hybrid work

Enjoy the flexibility with 3 office days and working from home for the remaining 2.

Work from anywhere

Recharge with a change of scenery - choose work from any location when you feel a need to power your creativity and drive.

Physical well‑being

Fuel your active lifestyle with online workouts led by our Physical Well‑Being experts. Unlock a variety of sports and wellness facilities, like gyms, swimming pools, and fitness classes, with the Multisport card.

Mental & emotional health

Nurture your mind with free psychologist consultations, dedicated mental health events, and premium access to top‑rated wellness apps like Calm, Headspace, and Mindletic.

Premium healthcare

Receive private health insurance giving you peace of mind for your health needs.

Joyful moments - special treats

Celebrate life's big moments with special gifts from us on your birthday, anniversary, and other major events, such as weddings or the arrival of a new family member.

Company events & team‑building

Experience iconic Nord Security celebrations, team‑buildings, and knowledge‑sharing events, nurturing bonds that fuel our success.

Workation

Embark on a legendary company getaway abroad, filled with exciting activities, live concerts, engaging workshops, and epic time together.

Kindly refer to our Privacy Notice for Recruitment Candidates for comprehensive information regarding our data handling procedures throughout recruitment processes: https://bit.ly/40GWyjL

We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we'll let you know in advance.

By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI‑based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision‑making, and every application is ultimately reviewed by a recruiter.

If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at [email protected]. Should you prefer to opt out of the automated evaluation, please submit your application directly to [email protected].

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.