Security Engineer, Corporate
Lovable Labs Sweden AB · Stockholm · Tills vidare · Deadline 2027-03-05
Lovable Labs Sweden AB is seeking a **Security Engineer, Corporate** to take ownership of the company's internal corporate environment. Based out of Stockholm alongside international offices, the role focuses on safeguarding laptops, identities, SaaS platforms, email, and workplace AI tools used across the organization. Core responsibilities include implementing and maintaining scalable controls such as passkeys, device trust, conditional access, data loss prevention, and SaaS security posture management. The engineer will also oversee detection and response for insider and account-takeover risks, lead awareness and phishing programs, implement data classifications, and partner with product and GRC teams to support **least-privilege defaults** and secure AI tool integrations. Candidates must bring at least **5+ years of experience** in corporate, enterprise, or endpoint security within a fast-growing tech setting. Essential qualifications include deep expertise in identity management (such as Okta, Entra, Google Workspace, SSO, SCIM, and conditional access), MDM solutions (like Jamf, Kandji, or Intune), and SaaS security posture, alongside scripting skills in Python, Bash, or Go to treat policies as software. Strong instincts regarding phishing, social engineering, and insider risks are required, as is professional fluency in English. Additional experience securing workplace AI tools and agents or managing hardware security keys is considered an advantage.
TL;DR You'll secure how Lovable works - the laptops, identities, SaaS apps, and AI tools 250+ Lovables use every day - without slowing anyone down.
Why Lovable?
Lovable is the software creation platform that gives people the power to act on the problems closest to them. For decades, turning an idea into software required so much capital, technical fluency, and time that many ideas never came to life. Lovable is the counterargument: a platform for all people with ideas, ambition, and problems worth solving. From solopreneurs to small business owners to teams at companies like Adidas and Zendesk, people have built over 60 million projects on Lovable since its launch in November 2024. And we’re just getting started.
We’re building a generational company from Stockholm, with growing teams in London, Boston, New York, and San Francisco. Our team is small, talent-dense, and moving quickly, with a culture rooted in extreme ownership, high velocity, and low-ego collaboration. We look for people who care deeply, ship fast, and are eager to make a dent in the world.
Lovable is one of TIME’s 100 Most Influential Companies and has been recognized on the Forbes AI 50 and CNBC Disruptor 50, reflecting our momentum as one of Europe’s fastest-growing AI companies and one of the most ambitious places to build in this next era of software.
What we're looking for
- 5+ years in corporate, enterprise, or endpoint security at a fast-growing tech company.
- Deep expertise in identity (Google Workspace/Okta/Entra, SSO, SCIM, conditional access), MDM (Jamf/Kandji/Intune), and SaaS security posture (SSPM).
- You can write code (Python, Bash, or Go) and treat policies as software - versioned, tested, deployed.
- Strong instincts for IT risks such as phishing, social engineering, and insider risk - including the new AI-flavored variants.
- Pragmatic about UX. You know when a control is real security and when it's just friction.
- Bonus: experience securing AI tools and agents in the workplace (Claude, ChatGPT, Cursor, et al).
- Bonus: experience managing hardware security keys
What you'll do
- Own the security of Lovable's corporate environment: identity, endpoints, SaaS, email, and the AI tools we live in.
- Roll out and maintain controls that scale - passkeys, device trust, conditional access, DLP, SSPM.
- Run phishing, awareness, and tabletop programs that actually change behavior.
- Work on Detection & Response to make detection of insider and account-takeover risk first-class.
- Secure and optimise our diverse AI toolstack, including Lovable itself, working closely with the product team on feedback and iterations
- Help the Security and GRC teams make least-privilege the default and auditability free.
- Ensure the right data is surfaced to the right people, while implementing data classifications and reducing the risk of data loss
Our Stack
- Devices: macOS, Linux, Kandji, Crowdstrike
- Networking: Tailscale, Cloudflare, Meter, Unifi
- IAM: Google Workspace, Okta, Entra
- Dev tools/data: Lovable, GitHub, BigQuery, various AI tools
- GRC: Vanta, Wiz
About your application
Please submit your application in English. It’s our company language, so you’ll be speaking lots of it if you join.
We treat all candidates equally - if you’re interested, please apply through our careers portal.