Senior Offensive Security Engineer

About Us
With over 150 million global active users and 2 million transactions per day, Klarna is on the way to becoming the world's favorite way to shop. To help us get there, we're assembling an unparalleled global talent team-accelerating individual careers, and disrupting entire industries. We're looking for people ready to achieve the extraordinary and embrace our bold ambitions as we shape the future of payments and fintech. Will you join us?

What You Will Do
As a Senior Offensive Security Engineer at Klarna, you will be at the forefront of safeguarding our digital infrastructure and customer data. This position demands a blend of hacking skills, creativity, and a deep understanding of cyber threats. You will simulate sophisticated cyber attacks to identify vulnerabilities, ensuring Klarna's resilience against real-world threats. Collaborating with cross-functional teams, you will provide actionable insights to fortify our security posture.

1. Conduct white-box and black-box penetration testing against internal and public-facing applications and assets
2. Manage, triage, and investigate Bug Bounty submissions and external pentest findings
3. Perform variant analysis on issues discovered through all channels
4. Research and perform security analyses on Klarna's 3rd-party solutions
5. Develop tooling to support reconnaissance, automation, and metrics collection
6. Provide expert guidance to developers, other product security teams, and the SOC in investigating issues
7. Spread awareness of offensive security practices via demos, workshops, and training
8. Assess the security of our tech stack through whatever means are best suited
9. Define what we focus on to provide the most value
10. Help further mature Klarna's security program

Who You Are

1. Strong experience with penetration testing and other technical security assessments
2. Experience identifying security issues in code, particularly within Java and Node.js
3. Experience with cloud environments, particularly AWS and modern micro-service design principles
4. Comfortable communicating findings clearly and effectively, with concrete remediation recommendations beyond simple issue reporting
5. Comfortable scripting and contributing to larger projects in Python
6. Able to take the initiative and be comfortable taking on projects that contribute to the larger security culture and posture at Klarna
7. Industry recognized certifications, e.g., OSCP, OSWE, CREST, GIAC, AWS, et. al
8. CTF Participation and active contributions to the cybersecurity community

What We Offer

1. Collaboration within a diverse team that values innovation and creativity.
2. Culture - You'll have an opportunity to work with people from 90+ different countries in our English-speaking offices in Milan city center
3. A challenging scope with the opportunity to work with latest technologies

Closing
Please include a CV in English.

Department: Engineering
Locations: Berlin, Germany
Yearly salary: €81,990 - €91,828
Employment type: Full-time