Security Engineer, Corporate

TL;DR You'll secure how Lovable works - the laptops, identities, SaaS apps, and AI tools 250+ Lovables use every day - without slowing anyone down.

• 5+ years in corporate, enterprise, or endpoint security at a fast-growing tech company.

• Deep expertise in identity (Google Workspace/Okta/Entra, SSO, SCIM, conditional access), MDM (Jamf/Kandji/Intune), and SaaS security posture (SSPM).

• You can write code (Python, Bash, or Go) and treat policies as software - versioned, tested, deployed.

• Strong instincts for IT risks such as phishing, social engineering, and insider risk - including the new AI-flavored variants.

• Pragmatic about UX. You know when a control is real security and when it's just friction.

• Bonus: experience securing AI tools and agents in the workplace (Claude, ChatGPT, Cursor, et al).

• Bonus: experience managing hardware security keys

• Own the security of Lovable's corporate environment: identity, endpoints, SaaS, email, and the AI tools we live in.

• Roll out and maintain controls that scale - passkeys, device trust, conditional access, DLP, SSPM.

• Run phishing, awareness, and tabletop programs that actually change behavior.

• Work on Detection & Response to make detection of insider and account-takeover risk first-class.

• Secure and optimise our diverse AI toolstack, including Lovable itself, working closely with the product team on feedback and iterations

• Help the Security and GRC teams make least-privilege the default and auditability free.

• Ensure the right data is surfaced to the right people, while implementing data classifications and reducing the risk of data loss

GRC: Vanta, Wiz