SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Lovable is a software creation platform that democratizes software development, enabling people with ideas to build without extensive capital or technical expertise. Since launch in November 2024, over 60 million projects have been created on the platform by solopreneurs, small business owners, and teams at companies like Adidas and Zendesk. The company is recognized as one of TIME's 100 Most Influential Companies and appears on Forbes AI 50 and CNBC Disruptor 50.
As Staff/Principal Software Engineer for Infrastructure Security, you will be the most senior engineer responsible for making Lovable's infrastructure impossible to compromise. You'll set technical direction across cloud, identity, and build/runtime security, designing and shipping guardrails including workload identity, least-privilege IAM, network segmentation, secrets management, and production access controls.
Key responsibilities include hardening the supply chain end-to-end from developer laptop to production deployment, partnering with Platform, SRE, and the Lovable Apps Platform teams to make the secure path the easy path, and mentoring engineers across the company to raise the security bar by default.
Required qualifications: 8+ years in infrastructure or cloud security with at least 3 years at staff/principal level. Deep expertise in GCP, AWS, and Cloudflare security primitives (IAM, network, KMS, workload identity, edge security). Hands-on experience with Kubernetes, Terraform, Wiz, GitHub Actions, and modern CI/CD with clear understanding of supply-chain security (SLSA, sigstore, SBOMs). Ability to write Go, Python, or Rust to ship guardrails as code. Track record of measurably reducing blast radius at high-growth companies. Bonus experience with multi-tenant platform security or LLM/agent-driven infrastructure.
Lovable's tech stack includes React and TypeScript frontend, Golang and Rust backend, Cloudflare/GCP/AWS cloud infrastructure, GitHub Actions for CI/CD, and data systems including Clickhouse, Firestore, Spanner, and BigQuery. The company is headquartered in Stockholm with growing teams in London, Boston, New York, and San Francisco. Culture emphasizes extreme ownership, high velocity, and low-ego collaboration.
