Fraud Prevention Engineer | Mid-Senior | NordVPN

The world’s most advanced VPN, and a whole lot more. If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands. Your impact? Helping millions take back control of their online security, privacy, and data. About the Role We're hiring a Fraud Prevention Engineer to own the technical side of fraud prevention in our Payments team. You'll sit between fraud analysts and engineering — investigating how attacks happen, building defenses, and translating between both worlds. Think: root cause analysis, Cloudflare/Turnstile optimization, technical roadmap ownership, and enabling analysts with deeper technical capabilities. This is the first hire in what will become a dedicated fraud prevention engineering function. Main Responsibilities Investigate fraud attacks end-to-end — identify vectors, perform root cause analysis at the infra and application level, implement countermeasures Configure and optimize Cloudflare (WAF, bot management, rate limiting, Workers) and Turnstile challenge flows Act as the technical bridge between fraud analysts, engineering, and product teams Analyze multiple attack vectors, plan and prioritize technical fraud prevention tasks on the roadmap Build tooling, scripts, and queries that elevate the fraud analyst team's technical capabilities Maintain deep understanding of payment flows (authorization, 3DS, tokenization) and where vulnerabilities sit Core Requirements 3+ years in fraud prevention, security engineering, or a technical role in payments JavaScript/TypeScript — comfortable with Cloudflare Workers, Turnstile, and browser-side challenge flows Backend understanding — can navigate server-side codebases, trace API flows, and read system logs Strong SQL — joins, window functions, large transaction datasets Hands-on Cloudflare experience (WAF, bot management, rate limiting) or similar edge/CDN security platforms Ability to communicate technical findings to non-technical stakeholders and vice versa Bonus points Python scripting for automation and data analysis Experience with log/observability tools (ELK, Grafana, Datadog) Background in application security or threat modeling Familiarity with fraud platforms (Forter, Riskified, Sift) or in-house rule engines Git workflow, CI/CD basics What We Offer Innovate with industry leaders Work alongside global experts to build world-leading cybersecurity tools, impacting millions of users around the world. Learn & grow Boost your skills via our extensive training programs (online and offline) & other resources. Benefit from mentorship and career-switch opportunities to grow within the company. Work from anywhere Recharge with a change of scenery – choose work from any location when you feel a need to power your creativity and drive. Physical well-being Fuel your active lifestyle with online workouts led by our Physical Well-Being experts. Unlock a variety of sports and wellness facilities, like gyms, swimming pools, and fitness classes, with the Multisport card. Mental & emotional health Nurture your mind with free psychologist consultations, dedicated mental health events, and premium access to top-rated wellness apps like Calm, Headspace, and Mindletic. Premium healthcare Receive private health insurance giving you peace of mind for your health needs. Joyful moments – special treats Celebrate life’s big moments with special gifts from us on your birthday, anniversary, and other major events, such as weddings or the arrival of a new family member. Company events & team-building Experience iconic Nord Security celebrations, team-buildings, and knowledge-sharing events, nurturing bonds that fuel our success. Workation Embark on a legendary company getaway abroad, filled with exciting activities, live concerts, engaging workshops, and epic time together. Kindly refer to our Privacy Notice for Recruitment Candidates for comprehensive information regarding our data handling procedures throughout recruitment processes. We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance. By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter. If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at [email protected] . Should you prefer to opt out of the automated evaluation, please submit your application directly to [email protected] .