Senior Security Engineer: Remote Pentest & Secure Coding

Nord Security; Town of Poland (NY); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Premium healthcare

Work from anywhere

Mental health resources

Company events

Training & mentorship

Job summary

Nord Security is seeking a security engineer to perform penetration testing on web and backend systems, crypto services, and related components. You will work remotely with global teams to strengthen threat protection and privacy technologies.

You will collaborate with developers to identify root causes, design secure fixes, and build automation to streamline security testing, contributing to a culture of knowledge sharing and continuous improvement.

Qualifications

• Experience in application security assessments including test planning and reporting.
• Proficiency with security scanners, static analyzers, and debuggers.
• Understanding TLS, PFS, PKI, and digital certificates.
• Experience with fuzzing, reverse engineering, and exploit development.
• Ability to work with developers to mitigate vulnerabilities.

Responsibilities

• Conduct penetration testing on web and backend applications, networking components, and crypto services.
• Demonstrate reverse engineering skills during code reviews of security solutions.
• Design and create solutions to handle complex security issues from scratch.
• Develop scripts and security automation tools to enhance testing processes.
• Collaborate with developers to validate root causes and mitigations.
• Share security knowledge with colleagues.

Skills

Penetration testing

Reverse engineering

Security automation

TLS/cryptography

Vulnerability reporting

Developer collaboration

Tools

Burp Suite

OWASP ZAP

Ghidra

CI/CD tooling

Job description

Nord Security is seeking a security engineer to perform penetration testing on web and backend systems, crypto services, and related components. You will work remotely with global teams to strengthen threat protection and privacy technologies.

You will collaborate with developers to identify root causes, design secure fixes, and build automation to streamline security testing, contributing to a culture of knowledge sharing and continuous improvement.