Security Engineer, Corporate

Job summary

Responsibilities

TL;DR You'll secure how Lovable works - the laptops, identities, SaaS apps, and AI tools 250+ Lovables use every day - without slowing anyone down.

• Own the security of Lovable's corporate environment: identity, endpoints, SaaS, email, and the AI tools we live in.
• Roll out and maintain controls that scale - passkeys, device trust, conditional access, DLP, SSPM.
• Run phishing, awareness, and tabletop programs that actually change behavior.
• Work on Detection & Response to make detection of insider and account-takeover risk first-class.
• Secure and optimise our diverse AI toolstack, including Lovable itself, working closely with the product team on feedback and iterations

What they're looking for

• 5+ years in corporate, enterprise, or endpoint security at a fast-growing tech company.
• Deep expertise in identity (Google Workspace/Okta/Entra, SSO, SCIM, conditional access), MDM (Jamf/Kandji/Intune), and SaaS security posture (SSPM).
• You can write code (Python, Bash, or Go) and treat policies as software - versioned, tested, deployed.
• Strong instincts for IT risks such as phishing, social engineering, and insider risk - including the new AI-flavored variants.
• Pragmatic about UX. You know when a control is real security and when it's just friction.

Tech stack

• Python
• Go
• BigQuery