DevSecOps Engineer | Senior | NordVPN Infrastructure

The Infrastructure department is responsible for influencing and tracking change, providing frontline support, and delivering software-defined solutions.

We are seeking a highly skilled SRE / DevOps / DevSecOps Engineer to join our team and take ownership of security management within our on-premise infrastructure. The ideal candidate will have a strong Linux and networking background, expertise in security testing, and experience in compliance management. This role requires a proactive approach to CVE management, penetration testing, and infrastructure hardening.

Main Responsibilities

• CVE Management: Identify, track, and mitigate vulnerabilities affecting our infrastructure, containers, and software;
• Security Management of On-Premise Infrastructure: Ensure security best practices for servers, networks, and storage systems;
• OS/Container/Software Patching Policies & Processes: Develop and maintain a structured approach to patch management to mitigate security risks;
• Security Reports & Audit Cooperation: Collaborate with internal teams and external auditors to ensure compliance with industry standards and regulations;
• Linux Hardening: Implement and enforce security configurations to protect against threats and vulnerabilities;
• Security Testing & Penetration Testing: Conduct security assessments, vulnerability scanning, and ethical hacking to identify and remediate weaknesses.

Core Requirements

• Linux Expertise: Strong knowledge of Linux systems, including security configurations and administration;
• Networking Knowledge: Proficiency in network protocols, firewalls, and security best practices;
• Firewall & Packet Filtering: Experience with nftables and iptables for securing network traffic;
• Containerization & Orchestration: Practical knowledge of Docker and container security best practices;
• SIEM Knowledge: Experience with Security Information and Event Management (SIEM) tools for threat detection and response;
• Python Programming: Ability to write automation scripts and security tools in Python;
• Security Testing & Penetration Testing: Experience in identifying vulnerabilities, performing ethical hacking, and reporting findings;
• CVE Management: Hands-on experience tracking and mitigating security vulnerabilities (CVEs);
• Compliance & Audit Management: Understanding of security compliance frameworks (e.g., ISO 27001, NIST, CIS benchmarks);
• Configuration Management: Experience with Ansible or SaltStack to automate system and security configurations.

Salary Range

• Monthly gross salary from 17200 PLN - 33400 PLN

About Us

Nord Security is a global leader in internet privacy and security solutions and Lithuania’s second tech unicorn. Established in 2012, Nord Security now has more than 1400 employees and serves millions of users worldwide. Our team has a global mission to shape a more secure and peaceful online future for people everywhere. With that in mind, we built several advanced cybersecurity solutions: NordVPN, NordLayer, NordLocker, NordPass, NordProtect, NordStellar, and Saily.

NordVPN is the world’s most advanced VPN service provider, used by millions of internet users worldwide. NordVPN provides double VPN encryption and Onion Over VPN and guarantees privacy with zero tracking. One of the key features of the product is Threat Protection, which blocks malicious websites, malware, trackers, and ads. NordVPN is very user friendly, offers one of the best prices on the market, and has over 5,000 servers in 59 countries worldwide.

And we’re always looking to expand our team of:

• Future shapers

• Restless achievers

• Self-movers

• Honest communicators

• Team players

What We Offer

• Access to Nord Security products. We build solutions used by millions of users worldwide, and you’ll get to experience our products firsthand;

• Professional growth. Internal and external events, online training, conferences, books - everything you need to reach full potential;

• Health benefits. Private health insurance, online and on-site workouts, consultations to feel and be your best;

• Mental wellbeing. Access to mental health tools like Calm, Headspace, and Mindletic. Options for therapy to keep your emotional wellbeing in check;

• Team spirit. Team buildings and parties with games, shows, tastings, food coupons, gifts, and it’s on us;

• More free time. Stay with us and additional vacation days will be added to your calendar;

• Additional paid leave. Additional days are covered by us in cases of illness or special occasions;

• Flexibility. Flexible working time arrangement.

Kindly refer to our Privacy Notice for Recruitment Candidates for comprehensive information regarding our data handling procedures throughout recruitment processes: https://bit.ly/3urJdOL