Lead Engineer — Application Security

• Experience with BugBounty programs or CTF competitions.

• Communication skills that hold up when explaining security tradeoffs to engineers who don't work in security day to day.

The Secure Development team equips Klarna's engineers to design, build, and deliver secure software through standardized tools and processes, continuous learning, and a security-focused engineering culture. As a Lead Engineer on the team, you'll work on preventing security flaws before they reach production, not cleaning them up after.

That means getting involved early: reviewing architecture and design decisions, running threat models, and helping engineering teams build applications and services that are hard to break in the first place. You'll pair that upstream work with hands-on assessment - code review and penetration testing - and with building the tooling and automation that make secure practices the path of least resistance across Klarna's engineering division.

• You'll perform threat modeling and architecture and design reviews, helping teams design hard-to-break applications and services.

• You'll take an active role in architectural decisions, working directly with engineering teams to drive security improvements.

• You'll build and improve Klarna's security tooling, automation, and processes on an ongoing basis.

• You'll perform security assessments of Klarna services, including code reviews and penetration testing.

• You'll contribute to Klarna's internal engineering security community.

At Klarna, we're building an everyday finance network, helping over 120 million consumers across 26 countries save time and money, and worry less about their finances. Working here means taking on problems most companies never get to solve, and being hands-on enough that the interesting part of the work lands with you, not someone else - you'll build with AI, not watch it happen.

This is the stretch zone. Come find out what you're capable of.

• You take a pragmatic approach to solving security issues, weighing effort against effect rather than chasing theoretical risk.

• You break down complex systems, spot where they're likely to fail, and land on fixes that work in practice.

• You've written and reviewed code in at least one of: JavaScript (NodeJS), Python, Go, Erlang, Java, or Scala.

• You're proficient across several of web application security, mobile application security, network security, operating system internals and hardening, applied cryptography, and cloud computing - and you're an expert in at least one of them.

• You have working proficiency in English.

• This position works cross-functionally across Klarna's engineering division, not within a single product team.

• We welcome candidates from non-traditional or self-taught security backgrounds - what matters is what you've built, broken, or fixed, not how you got there.

Please include a CV in English. Concrete beats comprehensive - what you built, what it did, what it cost. Curious to learn more about Klarna and what it's like to work here? Explore our career site!