10 hours ago
Stockholm, SwedenSenior
Responsibilities
- Run white-box and black-box penetration tests against internal systems and public-facing applications.
- Manage, triage, and investigate bug bounty submissions and external penetration testing findings.
- Perform variant analysis to identify related vulnerabilities across the codebase and infrastructure.
- Assess the security of third-party solutions and integrations.
- Build tooling for reconnaissance, automation, and metrics collection.
- Advise developers, product security teams, and SOC investigations using hands-on offensive security expertise.
- Lead demonstrations, workshops, and training on offensive security practices.
- Assess Klarna’s technology stack and help mature the security program.
Requirements
- At least 5 years of experience running penetration tests and technical security assessments against production systems.
- Ability to read code and identify vulnerabilities, particularly in Java and Node.js.
- Experience operating in AWS and reviewing microservice architectures for security gaps.
- Ability to document findings clearly with concrete remediation steps.
- Ability to script security tooling in Python.
- Industry certifications such as OSCP, OSWE, CREST, GIAC, or an AWS security certification are preferred.
- Active participation in CTFs or the security research community is preferred.
- Public security research such as CVEs, conference talks, or published tooling is preferred.
Benefits
- The role is based in Klarna’s Milan office.
- Most teams currently meet in person two to three days per week, subject to change by team.
- Non-obvious backgrounds and diverse skills, perspectives, and backgrounds are welcomed.
About Klarna
Klarna is a privately held fintech that provides buy now, pay later financing, checkout, and a consumer shopping app for e-commerce and retail. It monetizes through merchant fees, interchange, and interest and fees on financing, while offering marketing and customer acquisition tools to merchants. Founded in 2005 and headquartered in Stockholm, it operates across Europe and North America.