Posted 17 days ago
No clicks
Klarna is hiring a Senior Offensive Security Engineer to lead penetration testing, vulnerability research, and security assessments across internal and public-facing systems. The role involves managing bug bounty submissions, performing variant analysis, assessing third-party solutions, and developing tooling for automation and metrics. You will work closely with developers, product security, and SOC teams to provide remediation guidance and spread offensive security practices through demos and training. The position offers exposure to cloud environments (especially AWS), modern microservices, and requires strong scripting and hands-on hacking experience.
- Compensation
- Not specified
- City
- Milan
- Country
- Italy
Currency: Not specified
Full Job Description
What you will do
As a Senior Offensive Security Engineer at Klarna, you will be at the forefront of safeguarding our digital infrastructure and customer data. This position demands a blend of hacking skills, creativity, and a deep understanding of cyber threats. You will simulate sophisticated cyber attacks to identify vulnerabilities, ensuring Klarna's resilience against real-world threats.
• Conduct white-box and black-box penetration testing against internal and public-facing applications and assets.
• Manage, triage, and investigate Bug Bounty submissions and external pentest findings.
• Perform variant analysis on issues discovered through all channels.
• Research and perform security analyses on Klarna’s 3rd-party solutions.
• Develop tooling to support reconnaissance, automation, and metrics collection.
• Provide expert guidance to developers, product security teams, and SOC investigations.
• Spread awareness of offensive security practices via demos, workshops, and training.
• Assess the security of our tech stack and help mature Klarna’s security program.
Who you are
• Strong experience with penetration testing and technical security assessments.
• Experience identifying security issues in code, particularly within Java and Node.js.
• Experience with cloud environments, especially AWS and modern microservice design.
• Comfortable communicating findings clearly with concrete remediation recommendations.
• Skilled in Python scripting and automation.
• Self-driven, proactive, and engaged in advancing Klarna’s security culture.
• Industry-recognized certifications (e.g., OSCP, OSWE, CREST, GIAC, AWS).
• Active participation in CTFs and cybersecurity communities.
Awesome to have
• Collaboration within a diverse and innovative global team.
• Opportunity to work in Milan with a multicultural environment.
• Challenging scope with exposure to cutting-edge technologies.
Please include a CV in English.
Curious to learn more about Klarna and what it’s like to work here? Explore our career site!
