5 months ago
Stockholm, SwedenSenior
Responsibilities
- Conduct secure code reviews, threat modeling, and architecture assessments to identify and mitigate vulnerabilities.
- Collaborate with engineering teams to design and implement security features and embed security into product development.
- Lead security training, workshops, and one-to-one mentoring for developers.
- Integrate SAST/DAST and supply chain security tools into CI/CD pipelines.
- Detect, triage, and respond to application vulnerabilities and incidents while driving remediation and continuous improvement.
- Monitor and address emerging risks in AI infrastructure, LLM pipelines, and third-party dependencies.
Requirements
- 5+ years of experience in application security within product-focused technology companies, high-growth startups, or leading AI labs.
- Strong programming and engineering skills.
- Deep expertise in secure code review, threat modeling, SAST/DAST, supply chain security, product patching, and vulnerability management.
- Experience securing CI/CD pipelines, secrets management, service-to-service authentication, containerized workloads, and public cloud platforms.
- Hands-on experience collaborating with developers to implement security features and best practices.
- Experience educating and mentoring engineers on secure coding, vulnerability remediation, and emerging threats.
- Ability to read and contribute to codebases, build security tooling, and integrate security into engineering workflows.
- Experience building internal security tools or contributing to open-source security projects is a bonus.
About Lovable
Lovable builds an AI-native software creation platform that lets people build apps and websites by chatting with AI, along with tools such as gptengineer.app. It serves solopreneurs, small businesses, and enterprise teams, and users have created over 60 million projects since its November 2024 launch, with customers including Adidas and Zendesk. The company is privately held and headquartered in Stockholm.