Lead Engineer — Application Security

Klarna; Milano; In loco; EUR 90.000 - 140.000; Tempo pieno

Descrizione del lavoro

Klarna in Milan is seeking a Lead Engineer for Application Security to prevent security flaws early by reviewing architecture and design, running threat models, and guiding engineers in building hardened systems.

You will pair upstream work with hands-on assessment, code reviews, and penetration testing, and you will help build tooling and automation to make secure practices the default path across Klarna's engineering division.

Competenze

• Demonstrated experience in securing web/mobile apps and cloud deployments.
• Experience with threat modeling and secure design reviews.
• Hands-on security testing including code review and pentests.

Mansioni

• Perform threat modeling and architecture reviews to design hard-to-break apps and services.
• Drive security improvements by influencing architectural decisions with engineering teams.
• Build and improve Klarna's security tooling, automation, and processes.
• Conduct security assessments of Klarna services, including code reviews and penetration testing.
• Contribute to Klarna's internal security community.

Conoscenze

Web application security

Security architecture

Threat modeling

Code review

Penetration testing

Descrizione del lavoro

Klarna, briefly

At Klarna, we're building an everyday finance network, helping over 120 million consumers across 26 countries save time and money, and worry less about their finances. Working here means taking on problems most companies never get to solve, and being hands‑on enough that the interesting part of the work lands with you, not someone else — you'll build with AI, not watch it happen. This is the stretch zone. Come find out what you're capable of.

About the role

The Secure Development team equips Klarna's engineers to design, build, and deliver secure software through standardized tools and processes, continuous learning, and a security‑focused engineering culture. As a Lead Engineer on the team, you'll work on preventing security flaws before they reach production, not cleaning them up after. That means getting involved early: reviewing architecture and design decisions, running threat models, and helping engineering teams build applications and services that are hard to break in the first place. You'll pair that upstream work with hands‑on assessment — code review and penetration testing — and with building the tooling and automation that make secure practices the path of least resistance across Klarna's engineering division.

What you'll do

• You'll perform threat modeling and architecture and design reviews, helping teams design hard‑to‑break applications and services.
• You'll take an active role in architectural decisions, working directly with engineering teams to drive security improvements.
• You'll build and improve Klarna's security tooling, automation, and processes on an ongoing basis.
• You'll perform security assessments of Klarna services, including code reviews and penetration testing.
• You'll contribute to Klarna's internal engineering security community.

Who you are

• You take a pragmatic approach to solving security issues, weighing effort against effect rather than chasing theoretical risk.
• You break down complex systems, spot where they're likely to fail, and land on fixes that work in practice.
• You're proficient across several of web application security, mobile application security, network security, operating system internals and hardening, applied cryptography, and cloud computing — and you're an expert in at least one of them.
• You have working proficiency in English.
• Experience with BugBounty programs or CTF competitions.
• Communication skills that hold up when explaining security tradeoffs to engineers who don't work in security day to day.

Things you should know before applying

• This position works cross-functionally across Klarna's engineering division, not within a single product team.
• We welcome candidates from non‑traditional or self‑taught security backgrounds — what matters is what you've built, broken, or fixed, not how you got there.
• Please include a CV in English.
• Concrete beats comprehensive — what you built, what it did, what it cost.

• --

  [#J-MCITY]

Lead Engineer — Application Security • Milan - Italy