About the role
TL;DR You'll be the most senior engineer making sure Lovable's infrastructure is impossible to compromise. Cloud, identity, build pipelines, and runtime - yours to harden.
What we're looking for
8+ years in infrastructure or cloud security, with at least 3 at staff/principal level.
Deep expertise in GCP, AWS, and Cloudflare security primitives - IAM, network, KMS, workload identity, edge security.
Hands-on with Kubernetes, Terraform, Wiz, GitHub Actions, and modern CI/CD - and a clear view on supply-chain security (SLSA, sigstore, SBOMs).
Comfort writing Go, Python, or Rust to ship guardrails as code, not policies as PDFs.
Track record of measurably reducing blast radius - secrets, lateral movement, prod access - at a high-growth company.
Bonus: experience securing multi-tenant platforms or LLM/agent-driven infrastructure.
What you'll do
Set the technical direction for cloud, identity, and build/runtime security at Lovable.
Design and ship guardrails: workload identity, least-privilege IAM, network segmentation, secrets management, and prod access.
Harden the supply chain end-to-end - from developer laptop to production deploy.
Partner with Platform, SRE, and the Lovable Apps Platform team to make the secure path the easy path.
Mentor engineers across the company and raise the security bar by default, not by review.
Our tech stack
Frontend: React and Typescript.
Backend: Golang and Rust.
Cloud: Cloudflare, GCP, AWS, multiple LLM providers.
DevOps & Tooling: GitHub Actions, Grafana, OTEL, infra-as-code (Terraform).
Data: Clickhouse, Firestore, Spanner, BigQuery.
And we’re always exploring what’s next!