Senior Offensive Security Engineer

Senior Software Engineer - IAM & Security
We are on a mission to liberate humanity from all the meaningless time spent managing their purchases and finances, so they can do more of what they love. Klarna was founded on a bold belief: that people are capable of achieving the extraordinary, even when faced with the seemingly impossible. Our journey has been one of continuous learning, facing immense challenges head-on, dedicating countless hours of hard work, and never wavering in our commitment or resilience - and now we are looking for individuals to join us on our journey and contribute to our mission.
What You Will Do
As a Senior Offensive Security Engineer at Klarna, you will be at the forefront of safeguarding our digital infrastructure and customer data. This position demands a blend of hacking skills, creativity, and a deep understanding of cyber threats. You will simulate sophisticated cyber attacks to identify vulnerabilities, ensuring Klarna's resilience against real-world threats. Collaborating with cross-functional teams, you will provide actionable insights to fortify our security posture.
Conduct white-box and black-box penetration testing against internal and public-facing applications and assets
Manage, triage, and investigate Bug Bounty submissions and external pentest findings
Perform variant analysis on issues discovered through all channels
Research and perform security analyses on Klarna’s 3rd-party solutions
Develop tooling to support reconnaissance, automation, and metrics collection
Provide expert guidance to developers, other product security teams, and the SOC in investigating issues
Spread awareness of offensive security practices via demos, workshops, and training
Assess the security of our tech stack through whatever means are best suited
Define what we focus on to provide the most value
Help further mature Klarna’s security program



Who You Are
Strong experience with penetration testing and other technical security assessments
Experience identifying security issues in code, particularly within Java and Node.js
Experience with cloud environments, particularly AWS and modern micro-service design principles
Comfortable communicating findings clearly and effectively, with concrete remediation recommendations beyond simple issue reporting
Comfortable scripting and contributing to larger projects in Python
Able to take the initiative and be comfortable taking on projects that contribute to the larger security culture and posture at Klarna
Industry recognized certifications, e.g., OSCP, OSWE, CREST, GIAC, AWS, et. al
CTF Participation and active contributions to the cybersecurity community



What We Offer
Collaboration within a diverse team that values innovation and creativity.
Culture - You'll have an opportunity to work with people from 90+ different countries in our English-speaking offices in Milan city center
A challenging scope with the opportunity to work with latest technologies



Closing
Please include a CV in English.