Application Security Engineer – Mid-Senior, iOS

🔥 3 minutes ago

🇵🇱 Poland – Remote

💵 zł17.2k - zł30k / month

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Nord Security

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🔒 Cybersecurity

☁️ SaaS

🤝 B2B

💰 $100M Private Equity Round - Nord Security on 2023-09

Cybersecurity • SaaS • B2B

Nord Security is a software company that provides digital privacy and cybersecurity products for individuals and businesses. Its product suite includes NordVPN (VPN and integrated antivirus), NordLayer (business VPN and browser for SMBs), NordPass (password manager), NordLocker (end-to-end encrypted cloud storage), Coveron (identity theft protection), and Saily (an eSIM travel app with built-in security features). The company focuses on encryption, online privacy, threat protection, secure file storage/sharing, and identity/credit monitoring delivered primarily through subscription software and partnerships with security vendors and MSP-focused services.

📋 Description

• Conduct security reviews of application designs, source code, and third-party libraries/SDKs • Perform application vulnerability assessments using automated tools and manual testing, including SAST, DAST, SCA, and penetration testing • Perform end-to-end security assessments of iOS applications, including static and dynamic analysis and runtime instrumentation • Collaborate with development teams on secure architectures and security controls • Maintain security tools, scripts, and processes supporting secure development • Monitor industry trends, zero-day vulnerabilities, new iOS platform security changes, and application security best practices • Develop scripts, security automation tools, and instrumentation harnesses for mobile application security testing • Design and deliver security engineering awareness training • Identify internal security gaps within products • Ensure mobile applications are sufficiently tested and support internal and external audits, including MASVS-aligned assessments

🎯 Requirements

• Proven experience in mobile application security assessment planning, testing, methodologies, and vulnerability reporting, focused on iOS • Strong understanding of secure coding practices • Ability to perform manual security code audits • Proficiency in Swift or Objective-C, and ability to read C/C++ in dependencies • Practical knowledge of OWASP MASVS and MASTG, with ability to plan and execute assessments against them • Solid understanding of the iOS security model, including sandboxing, entitlements, code signing, Keychain, Data Protection classes, App Transport Security, IPC, URL schemes, universal links, app extensions, and app groups • Hands-on experience with Frida, Objection, MobSF, Burp Suite, mitmproxy, and class-dump/otool-style binary inspection • Experience bypassing certificate pinning, jailbreak detection, and anti-tampering controls • Solid understanding of TCP, UDP, HTTP, TLS, and mobile traffic interception • Understanding of insecure data storage, sensitive data leakage, and cryptographic misuse in mobile applications • Ability to use Wireshark and tcpdump • Familiarity with iOS reverse engineering and debugging tools such as Ghidra, IDA, Hopper, and LLDB • Ability to quickly assimilate new technologies and tools • Strong problem-solving and investigation skills • Ability to build relationships and influence stakeholders across the business • Familiarity with Android application security is a plus • Familiarity with fuzzing tools and techniques is a plus • Community contributions such as public CVEs, bug bounty recognition, open-source tools, or blogs are a bonus

🏖️ Benefits

• Training, mentorship, and room to grow • Extra vacation days, sick days, and time off • Private health insurance in Lithuania and Poland, fully covered • Free subscriptions to Calm, Headspace, and Mindletic • Resilience and mindfulness trainings • In-house gyms, sport cards, online workouts, and personal guidance • Company-wide workation trip abroad • Work from wherever keeps you in the zone • Gifts for birthdays, weddings, and new family members • Children’s summer camps and schedule flexibility • Team building and company events • Access to Vilnius HQ facilities including coffee bar, gyms, kids’ room, music room, and massage chairs • Bonus offered