Staff / Principal Software Engineer, Infrastructure Security
- Level
- Principal
- Work type
- On-site · Stockholm
Not stated in the posting: salary, visa.
Open. First seen 9 September 2026.
About the role
TL;DR You'll be the most senior engineer making sure Lovable's infrastructure is impossible to compromise. Cloud, identity, build pipelines, and runtime - yours to harden.
Why Lovable?
Lovable is the software creation platform that gives people the power to act on the problems closest to them. For decades, turning an idea into software required so much capital, technical fluency, and time that many ideas never came to life. Lovable is the counterargument: a platform for all people with ideas, ambition, and problems worth solving. From solopreneurs to small business owners to teams at companies like Adidas and Zendesk, people have built over 60 million projects on Lovable since its launch in November 2024. And we’re just getting started.
Lovable's standard text
We’re building a generational company from Stockholm, with growing teams in London, Boston, New York, and San Francisco. Our team is small, talent-dense, and moving quickly, with a culture rooted in extreme ownership, high velocity, and low-ego collaboration. We look for people who care deeply, ship fast, and are eager to make a dent in the world.
Lovable is one of TIME’s 100 Most Influential Companies and has been recognized on the Forbes AI 50 and CNBC Disruptor 50, reflecting our momentum as one of Europe’s fastest-growing AI companies and one of the most ambitious places to build in this next era of software.
What we're looking for
- 8+ years in infrastructure or cloud security, with at least 3 at staff/principal level.
- Deep expertise in GCP, AWS, and Cloudflare security primitives - IAM, network, KMS, workload identity, edge security.
- Hands-on with Kubernetes, Terraform, Wiz, GitHub Actions, and modern CI/CD - and a clear view on supply-chain security (SLSA, sigstore, SBOMs).
- Comfort writing Go, Python, or Rust to ship guardrails as code, not policies as PDFs.
- Track record of measurably reducing blast radius - secrets, lateral movement, prod access - at a high-growth company.
- Bonus: experience securing multi-tenant platforms or LLM/agent-driven infrastructure.
What you'll do
- Set the technical direction for cloud, identity, and build/runtime security at Lovable.
- Design and ship guardrails: workload identity, least-privilege IAM, network segmentation, secrets management, and prod access.
- Harden the supply chain end-to-end - from developer laptop to production deploy.
- Partner with Platform, SRE, and the Lovable Apps Platform team to make the secure path the easy path.
- Mentor engineers across the company and raise the security bar by default, not by review.
Our tech stack
- Frontend: React and Typescript.
- Backend: Golang and Rust.
- Cloud: Cloudflare, GCP, AWS, multiple LLM providers.
- DevOps & Tooling: GitHub Actions, Grafana, OTEL, infra-as-code (Terraform).
- Data: Clickhouse, Firestore, Spanner, BigQuery.
And we’re always exploring what’s next!
Lovable's standard text
About your application
Please submit your application in English. It’s our company language, so you’ll be speaking lots of it if you join.
We treat all candidates equally - if you’re interested, please apply through our careers portal.
What this role asks for
Particular to this role
IAM · Kubernetes
Rare in Lovable's other 51 open postings.
Standard for security roles
AWS · Python
Common in security postings at any company.
70% of this description is written for the role. The rest is Lovable's standard text, folded away below.
Read against Lovable's other open postings on this site.
The team: Security HIRES STEADILY
This role is one of 6 open in Security. 1 was posted in the last 30 days and the oldest in May: a team that hires all year rather than one being built.
WHAT THE TEAM WORKS WITH, ACROSS ITS POSTINGS
Golang (6 of 6), Cloudflare (5 of 6), LLM (5 of 6), TypeScript (5 of 6), AWS (4 of 6), BigQuery (4 of 6), CI/CD (4 of 6)
OTHER ROLES ON THIS TEAM
- Trust & Safety Engineer posted Oct 2
- Security Engineer, Corporate posted Sep 18
- Staff / Principal Software Engineer, Detection and Response posted Sep 14
- Staff / Principal Software Engineer, Security posted May 22
- Application Security Engineer posted May 15
From the team and dates on Lovable's own job board.
Similar jobs
- Area Lead at lovable
Shares 17 skills: Firebase, Cloudflare, ClickHouse… · same city - Senior/Middle Data Engineer at Raiffeisen Bank Ukraine
Shares 14 skills: ClickHouse, OpenTelemetry, BigQuery… - Senior Backend Software Engineer – Data Platform at Kaseya Careers
Shares 12 skills: OpenTelemetry, BigQuery, Rust… - Senior Software Engineer, Infrastructure at VSCO
Shares 10 skills: Cloudflare, OpenTelemetry, IAM… - Senior Platform Engineer at StackOne
Shares 13 skills: Cloudflare, ClickHouse, IAM… - Technical Writer at Lovable
Also at this company
Is this your posting and you want it taken down? Email info@careerholo.com.