Senior Security Engineer - Offensive Security

About Klarna

Klarna was founded in Stockholm, Sweden in 2005. Since then we've changed the banking industry forever. And now we're creating the world's smoothest shopping experience. We serve over 90 million consumers worldwide, and partner with 250,000 merchants – with a new merchant joining us every 8 minutes. Including some of the world's leading brands, such as H&M, ASOS, IKEA, Adidas, Samsung and Lufthansa. Our offices are spread over 17 different markets, hosted by 5000+ employees from 100+ nationalities.

Engineering at Klarna is an inspired, customer focused community, dedicated to crafting solutions that redefine our industry. Working in small, highly collaborative Agile teams, you and your team will have a clear mission and ownership of an important outcome that supports Klarna and our customers. At Klarna we optimise for quality, flow, fast feedback, focussing on end-to-end ownership, continuous improvement, testing, monitoring and experimentation. We aim for teams that are inclusive, helpful, and have a strong sense of ownership for the things they build.

Our engineers make some of the most significant decisions for the company and we are looking for bold, open and curious developers. As a Klarnaut, you’ll be inspired to contribute to the growth of Europe’s most highly valued fintech and your work will reach millions of users.

Want to be part of the change? We're expanding several of our engineering teams, including; teams working on our core checkout product, payment services, fraud prevention, or improving our billing service and shipping credentials to name a few.

You are a hacker. You love breaking stuff. You are also an engineer. We want to give you the freedom to work across the offensive space where it provides the most value.

What you'll get to do

  • Break all the things.
  • Conduct white-box and black-box penetration testing against internal and public-facing applications and assets.
  • Manage, triage, and investigate Bug Bounty submissions and external pentest findings.
  • Perform variant analysis on issues discovered through all channels.
  • Research and perform security analyses on Klarna’s 3rd-party solutions.
  • Develop tooling to support reconnaissance, automation, and metrics collection.
  • Provide expert guidance to developers, other product security teams, and the SOC in investigating issues.
  • Spread awareness of offensive security practices via demos, workshops and training.
  • Assess the security of our tech stack through whatever means are best suited.
  • Define what we focus on to provide the most value.
  • Help further mature Klarna’s security program.

To succeed in this role, we think you should have/be

  • Strong experience with penetration testing and other technical security assessments.
  • Experience identifying security issues in code, particularly within Java and Node.js
  • Experience with cloud environments, particularly AWS and modern micro-service design principles.
  • Comfortable communicating findings clearly and effectively, with concrete remediation recommendations beyond simple issue reporting.
  • Comfortable scripting and contributing to larger projects in Python.
  • Able to take initiative and be comfortable taking on projects that contribute to the larger security culture and posture at Klarna.
  • Industry recognised certifications, e.g. OSCP, OSWE, CREST, GIAC, AWS, et. al.
  • CTF Participation and active contributions to the cybersecurity community.

  • We also believe in contributing back to the open-source community. You can find some of our work here

What we can offer you

  • Culture - You'll have an opportunity to work with talented people from 90+ different countries in our brand new English speaking offices in Berlin city center.
  • Learning - We have a learning and development focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks, as well as a generous training budget.
  • Compensation - You’ll receive an attractive salary, pension, and insurance plans, plus we offer all of our employees an opportunity to invest in a RSU program and own a stake of the company. You’ll also receive 30 days annual leave and since we recognise that life is about more than work, we also offer benefits for gym memberships and discounted lunch through Smunch. We also support our working parents, so you don’t have to choose between work and family. 
  • Relocation - We can offer relocation support to Berlin.
How to apply: please send us your CV or Linkedin profile in English

Klarna is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and candidates. Please refrain from including your picture and age with your application.