2 months ago
Milan, Italy +3 moreSenior
Responsibilities
- Conduct offensive security assessments, penetration tests, red-team exercises, and vulnerability research against Klarna’s iOS and Android applications.
- Reverse-engineer mobile application binaries to identify sandboxing, permission, and platform-security weaknesses.
- Assess applications against the OWASP MASVS and MASTG frameworks.
- Evaluate and stress-test app-hardening and RASP protections.
- Document findings clearly, collaborate with engineering teams on remediation, and follow issues through to resolution.
Requirements
- Hands-on offensive mobile security experience through professional penetration testing, red teaming, bug bounty work, or dedicated security research against iOS, Android, or both.
- Strong understanding of mobile internals, including application sandboxing, permission models, and iOS and Android security architectures.
- Fluency with mobile security tools including Frida, Objection, MobSF, jadx, apktool, Ghidra, Hopper, Burp Suite, and mitmproxy.
- Experience using OWASP MASVS and MASTG as practical security assessment frameworks.
Benefits
- Most teams currently meet in the office 2–3 days per week, with the schedule varying by team and subject to change.
- Candidates from diverse and nontraditional backgrounds are welcome.
Tech Stack
iOS
Categories
About Klarna
Klarna is a privately held fintech that provides buy now, pay later financing, checkout, and a consumer shopping app for e-commerce and retail. It monetizes through merchant fees, interchange, and interest and fees on financing, while offering marketing and customer acquisition tools to merchants. Founded in 2005 and headquartered in Stockholm, it operates across Europe and North America.