Senior Offensive Security Engineer

Join Klarna, where you'll be part of a customer-centric community that thrives in Agile collaboration, innovating solutions that continuously redefine the industry.
Apply! We usually respond within two weeks

About Us
At Klarna, we are on a mission to reshape the shopping experience. We believe in delivering services that are not just innovative but also straightforward and safe. Our engineering teams are at the heart of our mission, driving the changes that impact our customers directly.

As a Senior Offensive Security Engineer at Klarna, you will be at the forefront of safeguarding our digital infrastructure and customer data. This role demands a blend of hacking skills, creativity, and a deep understanding of cyber threats. You will simulate sophisticated cyber attacks to identify vulnerabilities, ensuring Klarna's resilience against real-world threats. Collaborating with cross-functional teams, you will provide actionable insights to fortify our security posture.

Who you are
You are a technical security engineer with a robust foundation in Governance, Risk, and Compliance (GRC) who likes to audit and assess and doesn’t shy away from policies and compliance. At Klarna, you'll utilize your deep understanding of security frameworks and control mechanisms to enhance our cybersecurity posture. You enjoy working collaboratively with engineering and security teams to design and refine security solutions that protect Klarna’s operations.

What you will do
As a Security Controls Specialist in Klarna’s second line of defense, you will play a critical role in overseeing and strengthening the technical controls within our systems. You will work closely with our Engineering and Security domains to ensure that security controls are not only designed effectively but are also practical and enforceable. Your work will directly contribute to Klarna’s resilience against digital threats, supporting our mission to provide secure and innovative financial services. You will be leveraging your knowledge in different areas of Security like penetration testing, vulnerability management, threat intelligence, and incident response, network security, encryption protocols, and secure software development, making you a vital asset to Engineering Assurance.

Key Responsibilities
Collaborate with first-line technical teams to understand system architectures and operational challenges, ensuring that security controls are seamlessly integrated.
Design, develop, and implement robust technical controls tailored to the specific needs of Karna's environment.
Conduct regular security assessments and control validations to identify gaps and recommend enhancements.
Serve as a key liaison between technical teams and risk management to communicate security risks and the effectiveness of implemented controls.
Develop documentation and reports that detail security control frameworks, audits, and compliance status.
Facilitate training and workshops to enhance the understanding and implementation of security controls across various teams.
Monitor and analyze the latest cybersecurity trends and technologies to continually adapt and improve Klarna’s security strategies.
Leading and executing comprehensive penetration testing activities to identify vulnerabilities in Klarna's network, applications, and systems, ensuring that all security weaknesses are documented, communicated, and remediated in a timely manner.
Proven experience in defining, testing and automation of controls. A solid grasp of their organizational impact, particularly in relation to Engineering teams.

Required Skillset/Experience
Proficiency in both written and spoken English, enabling you to comprehend regulatory requirements and contracts effortlessly and lead meetings efficiently.
A minimum of 7 years of experience in a technical security engineering role or similar position within the cybersecurity field is required, along with a good understanding of Information Security Management Systems (ISMS) and their components.
Profound knowledge of security technologies and methodologies, including penetration testing, vulnerability management, security audits, threat modeling, incident response etc. Familiarity with network and application security tools and practices is desired.
Familiarity with scripting languages such as Python, Bash, or PowerShell to automate security tasks.
Capable of effectively communicating technical information to non-technical stakeholders and working collaboratively with Engineering and development teams to implement security measures.
Previous experience participating in technical security audits, including providing evidence and documentation to support audit findings and compliance is desired (& a plus)

What we offer:

• A role where you can make an impact from day one, with the opportunity to see the immediate effects of your work.
• Collaboration within a diverse team that values innovation and creativity.
• Culture - You'll have an opportunity to work with people from 90+ different countries in our English-speaking offices in Milan city center
• A challenging scope with the opportunity to work with latest technologies

Department Engineering Locations Stockholm, Sweden, Berlin, Germany Employment type Full-time About Klarna
Since 2005 Klarna has been on a mission to revolutionize the retail banking industry. With over 150 million global active users and 2 million transactions per day, Klarna is meeting the changing demands of consumers by saving them time and money while helping them be informed and in control.

Over 450,000 global retail partners, including H&M, Saks, Sephora, Macys, IKEA, Expedia Group, and Nike have integrated Klarna's innovative technology to deliver a seamless shopping experience online and in-store. Klarna has over 3,500 employees and is active in 45 markets.

Founded in 2005 Co-workers 3,500 Turnover 23.5B SEK Apply! Engineering · Stockholm, Sweden, Berlin, Germany Senior Offensive Security Engineer
Join Klarna, where you'll be part of a customer-centric community that thrives in Agile collaboration, innovating solutions that continuously redefine the industry.