Senior Security Engineer - Offensive Security
Klarna, Sweden

About Klarna
Klarna was founded in Stockholm, Sweden in 2005. Since then we've changed the banking industry forever. And now we're creating the world's smoothest shopping experience. We serve over 90 million consumers worldwide, and partner with 250,000 merchants with a new merchant joining us every 8 minutes. Including some of the world's leading brands, such as Hamp;M, ASOS, IKEA, Adidas, Samsung and Lufthansa. Our offices are spread over 17 different markets, hosted by 4000+ employees from 100+ nationalities.
Engineering at Klarna is an inspired, customer focused community, dedicated to crafting solutions that redefine our industry. Working in small, highly collaborative Agile teams, you and your team will have a clear mission and ownership of an important outcome that supports Klarna and our customers. At Klarna we optimise for quality, flow, fast feedback, focussing on end-to-end ownership, continuous improvement, testing, monitoring and experimentation. We aim for teams that are inclusive, helpful, and have a strong sense of ownership for the things they build.
Our engineers make some of the most significant decisions for the company and we are looking for bold, open and curious developers. As a Klarnaut, you’ll be inspired to contribute to the growth of Europe’s most highly valued fintech and your work will reach millions of users.
Want to be part of the change? We're expanding several of our engineering teams, including; teams working on our core checkout product, payment services, fraud prevention, or improving our billing service and shipping credentials to name a few.
You are a hacker. You love breaking stuff. You are also an engineer. We want to give you the freedom to work across the offensive space where it provides the most value.What you'll get to do

• Break all the things.
• Conduct white-box and black-box penetration testing against internal and public-facing applications and assets.
• Manage, triage, and investigate Bug Bounty submissions and external pentest findings.
• Perform variant analysis on issues discovered through all channels.
• Research and perform security analyses on Klarna’s 3rd-party solutions.
• Develop tooling to support reconnaissance, automation, and metrics collection.
• Provide expert guidance to developers, other product security teams, and the SOC in investigating issues.
• Spread awareness of offensive security practices via demos, workshops and training.
• Assess the security of our tech stack through whatever means are best suited.
• Define what we focus on to provide the most value.
• Help further mature Klarna’s security program.

To succeed in this role, we think you should have/be

• Strong experience with penetration testing and other technical security assessments.
• Experience identifying security issues in code, particularly within Java and Node.js
• Experience with cloud environments, particularly AWS and modern micro-service design principles.
• Comfortable communicating findings clearly and effectively, with concrete remediation recommendations beyond simple issue reporting.
• Comfortable scripting and contributing to larger projects in Python.
• Able to take initiative and be comfortable taking on projects that contribute to the larger security culture and posture at Klarna.
• Industry recognised certifications, e.g. OSCP, OSWE, CREST, GIAC, AWS, et. al.
• CTF Participation and active contributions to the cybersecurity community.

We also believe in contributing back to the open-source community. You can find some of our work herehttps://github.com/klarna.What we can offer you
Culture -You'll have an opportunity to work with people from 90+ different countries in our English speaking offices in Stockholm/Berlin city centre.
Learning -We have a learning and development focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks.
Compensation -You’ll receive an attractive salary, pension, and insurance plans, plus we offer all of our employees an opportunity to invest in a RSU program and own a stake of the company. You’ll also receive 30 days annual leave and since we recognise that life is about more than work, we also offer benefits for gym memberships, marathons, and all sorts of activities that promote physical health. We also have generous parental leave (for men and women).
Relocation -We can offer relocation support to Stockholm.We know diverse teams are strong teams, so we welcome those with alternative identities,