Job-ID: b06e3cd8-9f42-42a1-a575-d874f6f8c7b9 Location: Milan Salary: 72950
I candidati sono invitati a leggere attentamente tutti gli elementi di questo annuncio. La preghiamo di inviare la sua candidatura tempestivamente.
- 93142 EUR Type: Full time Posted: 2 Contact: ...
Klarna, briefly At Klarna, we’re building an everyday finance network, helping over 120 million consumers across 26 countries save time and money, and worry less about their finances.
Working here means taking on problems most companies never get to solve, and being hands‑on enough that the interesting part of the work lands with you, not someone else – you’ll build with AI, not watch it happen.
This is the stretch zone.
Come find out what you’re capable of.
About the role Klarna runs a public Bug Bounty program and works with external pentest vendors year-round, which means a constant stream of real findings – and someone has to work out which ones matter, why, and what else might be affected by the same root cause.
That’s this position.
You’ll sit on the Offensive Security team, running your own penetration tests against Klarna’s internal and public-facing systems while also triaging what comes in from bug hunters, pentest vendors, and the SOC.
When you find something, you won’t stop at the one instance – you’ll dig for variants across the codebase and infrastructure, and take what you learn back to the teams that own the code.
Klarna’s stack runs Java and Node.js services on AWS in a microservice architecture, with third-party integrations added constantly – you’ll need to keep pace with all of it, not just one corner.
What you’ll do You’ll run white-box and black-box penetration tests against internal systems and public-facing applications.
You’ll manage, triage, and investigate Bug Bounty submissions and external pentest findings.
You’ll perform variant analysis on issues surfaced through any channel, tracing where else the same class of bug might exist.
You’ll research and assess the security of Klarna’s third-party solutions and integrations.
You’ll build tooling for reconnaissance, automation, and metrics collection.
You’ll guide developers, product security teams, and SOC investigations with hands-on expertise.
You’ll run demos, workshops, and training that spread offensive security practices across Klarna.
You’ll assess the security of Klarna’s tech stack and help mature the security program overall.
Who you are You’ve spent 5+ years running penetration tests and technical security assessments against production systems, not just lab environments.
You can read code and find real vulnerabilities in it, particularly in Java and Node.js.
You’re comfortable operating in AWS and reviewing microservice architectures for security gaps.
You write up what you find so developers can act on it – clear findings tied to concrete remediation steps, not just severity labels.
You script your own tooling in Python rather than relying only on off-the-shelf scanners.
You push offensive security forward at Klarna on your own initiative, not just when assigned a ticket.
Bonus points for Industry certifications such as OSCP, OSWE, CREST, GIAC, or an AWS security certification.
Active participation in CTFs or the broader security research community.
Public security research you can point to – CVEs, conference talks, or published tooling.
Things you should know before applying This position is based in Klarna’s Milan office; most teams currently meet in person 2–3 days per week, and this varies by team and can change over time.
Non-obvious backgrounds are welcome.
Diversity of skills, perspectives, and backgrounds is how we create, innovate, and disrupt like no other.
Final compensation will be based on the candidate’s qualifications, skills, and experience.
Please include a CV in English.
Concrete beats comprehensive – what you built, what it did, what it cost. xysqume
Curious to learn more about Klarna and what it’s like to work here?
#J-18808-Ljbffr
Senior offensive security engineer • Milano, Italy
Docebois seeking a Senior Security Engineer to secure our AWS cloud infrastructure and drive cloud security controls across multiple layers.You will work with Cloud Infrastructure, Engineering, and... Mostra di più
Un'azienda di cyber security leader in Lombardia cerca un Cyber Security Engineer con esperienza in Netskope per la gestione operativa di architetture di sicurezza cloud.La posizione include suppor... Mostra di più
Hybrid – Bollate (Milano), 2 days a week in the office /p pReady to Make an Impact? /p pThis is a permanent role with strong local responsibility and high visibility within a global organization.Yo... Mostra di più
Oggi bCRPI Digital Group /b è una realtà interamente dedicata all’innovazione tecnologica, alla transizione digitale e al business consulting.Rappresenta l’evoluzione naturale di un percorso impren... Mostra di più
Global Security Operations Center.Il candidato monitorerà eventi di sicurezza relativi a sistemi, applicazioni e workflow che usano frontier LLM, agenti IA e RAG, contribuendo a detection e respons... Mostra di più
Una banca importante in Milano sta ricercando un Senior Security Architect per supportare il servizio di sicurezza e resilienza.La figura garantirà l'implementazione delle architetture di sicurezza... Mostra di più
At Bending Spoons, we're striving to build one of the all-time great companies.A company that serves a huge number of customers.A company where team members grow to their full potential.A company t... Mostra di più
In DGS il talento diventa impatto perché entra in progetti reali, dove competenze tecnologiche, visione di business e collaborazione si incontrano per accompagnare aziende e organizzazioni nei loro... Mostra di più
Leonardo Worldwide Corporation cerca un Security Manager per la sede di Roma Laurentina, con possibilità anche a Milano Nerviano.Il candidato ideale avrà esperienza nella definizione ed implementaz... Mostra di più
Entrerai nel Global Security Operation Center, occupandoti del monitoraggio, l'analisi e la gestione operativa degli eventi di sicurezza relativi a sistemi, applicazioni e workflow aziendali che ut... Mostra di più
At Docebo, we’re using AI to change how people learn at work—and we mean actually change it.We’re an AI-powered learning platform that helps organizations create, deliver, and manage training all i... Mostra di più
Al fine di rafforzare il servizio Security & Resilience di Capogruppo, Cassa Centrale Banca sta ricercando un profilo.Ufficio Enterprise Security Architecture & Security by Design.La missione dell’... Mostra di più
Snam cerca uno Cyber Security Resilience Specialist per rafforzare le capacità di detection, analysis e risposta agli incidenti in ambienti IT, OT e cloud.Inizia collaborando con il SOC, definendo... Mostra di più
Siamo alla ricerca di un OT Security Consultant.La figura sarà un punto di riferimento operativo per i servizi professionali di OT Security, lavorando a stretto contatto con il responsabile della p... Mostra di più
Overview /h3pbCYBER SECURITY ENGINEER (L2/L3) /b /ppIn WIIT, società italiana di respiro internazionale quotata al segmento Star, abbiamo scelto di fare la differenza per i nostri clienti.Siamo lea... Mostra di più
Capgemini Engineering cerca un Cybersecurity Engineer per il Cybersecurity Expertise Center.Entrerai a far parte di progetti di sicurezza e supporterai la delivery per i clienti, collaborando con t... Mostra di più
Siamo una società dinamica, giovane e flessibile che opera da oltre 10 anni nel campo dell'Information & Communication Technology.Offriamo servizi e soluzioni altamente qualificati a partner e Clie... Mostra di più
Il Gruppo EIES, composto da Energent, I&M, Enway e Skienda è una realtà di consulenza e di prodotto consolidata nel mercato delle soluzioni e dei servizi ICT.Ricerchiamo un Security Engineer con es... Mostra di più
DGS /b fornisce servizi e soluzioni di valore in ambito bCyber Security, Digital Solutions e Management Consulting /b.Lo scopo che guida le nostre azioni è il pieno soddisfacimento delle esigenze d... Mostra di più
Zimperium® is the world leader in mobile security, purpose-built to protect the modern mobile enterprise.Trusted by leading organizations and governments, our AI-driven platform delivers real-time,... Mostra di più
