Staff / Principal Software Engineer, Infrastructure Security

The role

You will set the technical direction for cloud, identity, and build/runtime security. You will design and ship guardrails, harden the supply chain, and mentor engineers.

What you will do

• Set the technical direction for cloud, identity, and build/runtime security
• Design and ship guardrails including workload identity, least-privilege IAM, network segmentation, secrets management, and prod access
• Harden the supply chain end-to-end from developer laptop to production deploy
• Partner with Platform, SRE, and the Lovable Apps Platform team
• Mentor engineers across the company

Required qualifications

• 8+ years in infrastructure or cloud security
• At least 3 years at staff/principal level
• Deep expertise in GCP, AWS, and Cloudflare security primitives - IAM, network, KMS, workload identity, edge security
• Hands-on with Kubernetes, Terraform, Wiz, GitHub Actions, and modern CI/CD
• Clear view on supply-chain security (SLSA, sigstore, SBOMs)
• Comfort writing Go, Python, or Rust to ship guardrails as code
• Track record of measurably reducing blast radius - secrets, lateral movement, prod access - at a high-growth company

Nice to have

• experience securing multi-tenant platforms or LLM/agent-driven infrastructure

About the company

Lovable is a software creation platform that allows people to turn ideas into software. It is a generational company building from Stockholm with teams in London, Boston, New York, and San Francisco.