Software Engineer, Security (AI Code)

TL;DR We're looking for a Fullstack Engineer who lives and breathes AI code security. You'll design and build our static code analysis and security scanning capabilities, making Lovable the most secure AI-powered software creation platform on the planet.

Why Lovable?
Lovable lets anyone and everyone build software with any language. From solopreneurs to Fortune 100 teams, millions of people use Lovable to transform raw ideas into real products - fast. We are at the forefront of a foundational shift in software creation, which means you have an unprecedented opportunity to change the way the digital world works. Lovable-built applications and websites are visited hundreds of millions of times a month, and our enterprise footprint is compounding fast. And we're just getting started.

We're a small, talent-dense team building a generation-defining company from Stockholm. We value extreme ownership, high velocity, and low-ego collaboration. We seek out people who care deeply, ship fast, and are eager to make a dent in the world.

What We're Looking For

• 3+ years of experience in code security, static analysis, or code scanning, ideally building or contributing to security-focused products (SAST, linters, vulnerability scanners, or similar - with AI or advanced machine learning techniques).
• 5+ years of full-stack engineering experience shipping high-quality products.
• Proficiency in modern frontend (React/TypeScript) and backend (Golang, Rust) development.
• Solid understanding of systems design, performance tradeoffs, and scalable architecture.
• Strong product sense and ability to translate security findings into intuitive, actionable user experiences.
• Bonus: Master's or PhD in code analysis, static analysis, or a related field. Experience integrating AI/LLMs into security tooling. Familiarity with mobile app security scanning.

What You'll Do

• Build out our code scanning engine: Design and implement static analysis and security scanning that surfaces findings in user-generated application code across web and mobile.
• Ship features end-to-end across frontend, backend, and infrastructure as part of a small, self-sufficient team (≤3 engineers).
• Integrate AI/LLM capabilities into security workflows to detect, explain, and remediate vulnerabilities.
• Advocate for secure coding practices, conduct security-focused code reviews, and raise the bar across the engineering org.
• Influence our technical direction and product strategy with a security-first mindset.
• Help make Lovable the most secure AI product in the market.

Our Tech Stack

• Frontend: React and Typescript.
• Backend: Golang and Rust.
• Cloud: Cloudflare, GCP, AWS, Modal, multiple LLM providers.
• DevOps & Tooling: GitHub Actions, Grafana, OTEL, infra-as-code (Terraform).
• Data: Clickhouse, Firestore, Spanner, BigQuery.

And we're always exploring what's next!

How to Apply

• Please submit your application in English-our working language at Lovable.
• We're committed to fair and equal treatment for all candidates. If you're interested, apply via our careers portal