{"id":572325,"url":"https://alion.io/job/klarna-senior-offensive-security-engineer-2","title":"Senior Offensive Security Engineer","company":{"id":11,"name":"Klarna","domain":"klarna.com","url":"https://alion.io/company/klarna","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Deel","truth_index":{"grade":"B","score":78,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":109,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":337470,"max":461928,"currency":"PLN","period":"year","gross":null,"usd_annual":118823},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Java","optional":false},{"name":"Node JS","optional":false},{"name":"Python","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-04-01T09:04:50Z","employer_posted_date":"2026-09-09","last_verified_at":"2026-10-29T17:49:21Z","board_verified":true,"closed_at":null,"days_open":211,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":211},"description":"Klarna, briefly\nAt Klarna, we're building an everyday finance network, helping over 120 million consumers across 26 countries save time and money, and worry less about their finances. Working here means taking on problems most companies never get to solve, and being hands-on enough that the interesting part of the work lands with you, not someone else - you'll build with AI, not watch it happen.\nThis is the stretch zone. Come find out what you're capable of.\nAbout the role\nKlarna runs a public Bug Bounty program and works with external pentest vendors year-round, which means a constant stream of real findings - and someone has to work out which ones matter, why, and what else might be affected by the same root cause. That's this position.\nYou'll sit on the Offensive Security team, running your own penetration tests against Klarna's internal and public-facing systems while also triaging what comes in from bug hunters, pentest vendors, and the SOC. When you find something, you won't stop at the one instance - you'll dig for variants across the codebase and infrastructure, and take what you learn back to the teams that own the code.\nKlarna's stack runs Java and Node.js services on AWS in a microservice architecture, with third-party integrations added constantly - you'll need to keep pace with all of it, not just one corner.\nWhat you'll do\nYou'll run white-box and black-box penetration tests against internal systems and public-facing applications.\n\nYou'll manage, triage, and investigate Bug Bounty submissions and external pentest findings.\n\nYou'll perform variant analysis on issues surfaced through any channel, tracing where else the same class of bug might exist.\n\nYou'll research and assess the security of Klarna's third-party solutions and integrations.\n\nYou'll build tooling for reconnaissance, automation, and metrics collection.\n\nYou'll guide developers, product security teams, and SOC investigations with hands-on expertise.\n\nYou'll run demos, workshops, and training that spread offensive security practices across Klarna.\n\nYou'll assess the security of Klarna's tech stack and help mature the security program overall.\n\nWho you are\nYou've spent 5+ years running penetration tests and technical security assessments against production systems, not just lab environments.\n\nYou can read code and find real vulnerabilities in it, particularly in Java and Node.js.\n\nYou're comfortable operating in AWS and reviewing microservice architectures for security gaps.\n\nYou write up what you find so developers can act on it - clear findings tied to concrete remediation steps, not just severity labels.\n\nYou script your own tooling in Python rather than relying only on off-the-shelf scanners.\n\nYou push offensive security forward at Klarna on your own initiative, not just when assigned a ticket.\n\nBonus points for\nIndustry certifications such as OSCP, OSWE, CREST, GIAC, or an AWS security certification.\n\nActive participation in CTFs or the broader security research community.\n\nPublic security research you can point to - CVEs, conference talks, or published tooling.\n\nThings you should know before applying\nThis position is based in Klarna's Milan office; most teams currently meet in person 2-3 days per week, and this varies by team and can change over time.\n\nNon-obvious backgrounds are welcome. Diversity of skills, perspectives, and backgrounds is how we create, innovate, and disrupt like no other.\n\nFinal compensation will be based on the candidate's qualifications, skills, and experience.\n\nPlease include a CV in English. Concrete beats comprehensive - what you built, what it did, what it cost.\nCurious to learn more about Klarna and what it's like to work here? Explore our career site!","description_format":"text","description_chars":3727,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Payment Processing & Gateways","Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-09-09T13:56:47Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.668,"p_room":0.36,"age_days":210,"expected_fill_days":109,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":118823,"is_top_pay":false},"html_url":"https://alion.io/job/klarna-senior-offensive-security-engineer-2","json_url":"https://alion.io/job/klarna-senior-offensive-security-engineer-2.json","meta":{"generated_at":"2026-10-29T21:16:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31502,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":11},"rest":"https://alion.io/mcp/rest/get_company?id=11"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fklarna-senior-offensive-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fklarna-senior-offensive-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fklarna-senior-offensive-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/klarna-senior-offensive-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fklarna-senior-offensive-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":572325}},{"tool":"search_jobs","arguments":{"company":"klarna.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":572325},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}