Job-ID: a6649d86-1584-464a-b5bf-42457115df2fLocation: London; Milan; Stockholm; WarsawSalary: 91196 - 116438 GBPType: Full timePosted: 2026-08-26Contact: ivy.chiang@klarna.comKlarna, briefly At Klarna, we're building an everyday finance network, helping over 120 million consumers across 26 countries save time and money, and worry less about their finances. Working here means taking on problems most companies never get to solve, and being hands-on enough that the interesting part of the work lands with you, not someone else — you'll build with AI, not watch it happen. This is the stretch zone. Come find out what you're capable of. About the role Every payment, login, and stored card in Klarna's iOS and Android apps depends on mobile-specific protections holding up — sandboxing, permission models, anti-tampering — and someone has to attack them before someone else does. That's you. You'll work as an offensive security specialist focused entirely on Klarna's mobile surface. You'll run penetration tests and red-team exercises against the apps, reverse-engineer builds to find what static review misses, and use the OWASP Mobile Application Security Verification Standard (MASVS) and Testing Guide (MASTG) as your working framework rather than a checklist you fill in after the fact. You'll work closely with the engineering teams who build and harden the apps, turning what you find into fixes that ship, not just findings that sit in a report. What you'll do You'll run offensive security assessments — penetration tests, red-team exercises, and vulnerability research — against Klarna's iOS and Android apps. You'll reverse-engineer app binaries to surface sandboxing, permission, and platform-security weaknesses before an outside attacker finds them. You'll test Klarna's mobile apps against the OWASP MASVS and MASTG, and use the results to drive concrete fixes with engineering teams. You'll evaluate and stress-test app-hardening and RASP protections, working directly with the teams that build and maintain them. You'll write up what you find in a way engineers can act on immediately, and follow through until it's actually fixed. Who you are You've done hands-on offensive mobile security work — professional pentesting, red teaming, bug bounty, or dedicated security research — against iOS, Android, or both. You understand mobile internals: app sandboxing, permission models, and the security architectures of iOS and Android. You're fluent with mobile security tooling such as Frida, Objection, MobSF, jadx or apktool, Ghidra or Hopper, Burp Suite, and mitmproxy. You work from the OWASP MASVS and MASTG as your reference framework, not as an afterthought. Bonus points for Experience securing fintech, payments, or banking apps. Exposure to app-hardening and RASP solutions, from both the attacker's and defender's side. Published CVEs, research, conference talks, or a track record in mobile bug bounty programs. Experience shipping production mobile code or similar. Familiarity with mobile app attestation (Play Integrity, App Attest) and device-binding schemes. Things you should know before applying Working together: we value co-located teams; most teams currently meet in the office 2–3 days per week, and this varies by team and can change over time. Non-obvious backgrounds are welcome. Diversity of skills, perspectives and backgrounds is how we create, innovate, and disrupt like no other. Final compensation will be based on the candidate's qualifications, skills, and experience. Please include a CV in English. Concrete beats comprehensive — what you built, what it did, what it cost. Curious to learn more about Klarna and what it's like to work here? Explore our career site!
Mobile Application Senior Security Engineer • Milan, Lombardy, Italy
Un'azienda di cyber security leader in Lombardia cerca un Cyber Security Engineer con esperienza in Netskope per la gestione operativa di architetture di sicurezza cloud.La posizione include suppor... Mostra di più
Una banca importante in Milano sta ricercando un Senior Security Architect per supportare il servizio di sicurezza e resilienza.La figura garantirà l'implementazione delle architetture di sicurezza... Mostra di più
Zimperium® is the world leader in mobile security, purpose-built to protect the modern mobile enterprise.Trusted by leading organizations and governments, our AI-driven platform delivers real-time,... Mostra di più
A leading European Bank in Milan seeks a Cyber Security Expert specializing in Identity & Access Management (IAM).This role involves designing and implementing solutions for Identity Governance, Ac... Mostra di più
SynSphere, azienda leader in sicurezza informatica, cerca un Microsoft Security Specialist per progettare e gestire soluzioni di sicurezza nell'ecosistema Microsoft.Si offre assunzione diretta a te... Mostra di più
At Bending Spoons, we're striving to build one of the all-time great companies.A company that serves a huge number of customers.A company where team members grow to their full potential.A company t... Mostra di più
Seleziona la frequenza (in giorni) di ricezione di un avviso: Crea avviso /p pEntrerai in un team altamente specializzato che si occupa della definizione e del disegno dei presidi e dei processi di... Mostra di più
Are you looking for a new challenge?.Fancy helping us shape the future of motor insurance?.Prima could be the place for you.Since 2015, we’ve been using our love of data and tech to rethink motor i... Mostra di più
At Docebo, we’re using AI to change how people learn at work—and we mean actually change it.We’re an AI-powered learning platform that helps organizations create, deliver, and manage training all i... Mostra di più
Al fine di rafforzare il servizio Security & Resilience di Capogruppo, Cassa Centrale Banca sta ricercando un profilo.Ufficio Enterprise Security Architecture & Security by Design.La missione dell’... Mostra di più
Proteggi infrastrutture critiche e garantisci la sicurezza di ambienti complessi!.Hai esperienza nella gestione di infrastrutture di rete e sicurezza in contesti enterprise e vuoi lavorare su proge... Mostra di più
CYBER SECURITY ENGINEER (L2/L3).In WIIT, società italiana di respiro internazionale quotata al segmento Star, abbiamo scelto di fare la differenza per i nostri clienti.Siamo leader nell’erogazione ... Mostra di più
Intesa Sanpaolo Group a Milano cerca un Cybersecurity Architect per definire i presidi di sicurezza su iniziative AI del gruppo, assicurando conformità allEU AI Act e alle normative di riferimento.... Mostra di più
Ajax Systems is a leading security technology company providing end-to-end solutions for homes and businesses worldwide.The role involves conducting technical seminars, presenting product roadmaps,... Mostra di più
Engineering Srl, Milano, Italia, ricerca un Network & Cloud Security Engineer da inserire in modalità ibrida.Il ruolo prevede progettazione e implementazione di soluzioni di sicurezza avanzate in a... Mostra di più
Zimperium® is the world leader in mobile security, purpose-built to protect the modern mobile enterprise.Trusted by leading organizations and governments, our AI-driven platform delivers real-time,... Mostra di più
Il Gruppo EIES, composto da Energent, I&M, Enway e Skienda è una realtà di consulenza e di prodotto consolidata nel mercato delle soluzioni e dei servizi ICT.Ricerchiamo un Security Engineer con es... Mostra di più
DGS /b fornisce servizi e soluzioni di valore in ambito bCyber Security, Digital Solutions e Management Consulting /b.Lo scopo che guida le nostre azioni è il pieno soddisfacimento delle esigenze d... Mostra di più
Siamo una società dinamica, giovane e flessibile che opera da oltre 10 anni nel campo dell'Information & Communication Technology.Offriamo servizi e soluzioni altamente qualificati a partner e Clie... Mostra di più
Oversonic Robotics is a leading company in the cognitive humanoid robotics sector, founded in 2020 with an entrepreneurial vision and a goal aimed at progress and well‑being: to make the benefits o... Mostra di più
