Application Security Engineer

Lovable; Stockholms kommun; On-site; SEK 655,737 - 983,606; Full time

Job summary

A dynamic software development company in Stockholm is hiring an Application Security Engineer to ensure security is embedded in the development lifecycle. You will conduct code reviews, collaborate with engineering teams, and lead workshops to foster a security-oriented culture. Ideal candidates have over 5 years in application security and a passion for mentoring engineers. The position focuses on securing cloud-native environments and implementing security features.

Qualifications

• 5+ years of experience in application security.
• Strong programming and engineering skills.
• Hands-on experience collaborating with developers.
• Systems mindset with security tooling experience.

Responsibilities

• Conduct secure code reviews and architecture assessments.
• Work closely with engineering to implement security features.
• Lead security training and mentoring.
• Monitor and address emerging risks in AI infrastructure.

Skills

Application security

Secure code review

Threat modeling

Collaboration with developers

Cloud-native environment security

Tools

CI/CD tools

Security tools (SAST/DAST)

Cloud platforms (AWS, Google Cloud)

Job description

TL;DR We are seeking an Application Security Engineer to champion security across our entire development lifecycle. You’ll play a pivotal role in reviewing code, designing secure features, and mentoring engineers, ensuring security is at the heart of everything we build. If you’re passionate about application security, thrive on close collaboration with developers, and want to do the work of your life, this is your opportunity

Why Lovable?

Lovable enables anyone to build software using plain English. From solo founders to Fortune 100 teams, millions use Lovable to turn ideas into products—quickly and securely. We’re leading a fundamental shift in how software is created, and you’ll help shape the security standards for this new era. With over 2 million users in 200+ countries, our reach is global—and growing fast.

We’re a small, high-impact team based in Stockholm, driven by ownership, speed, and low‑ego collaboration. We value people who care deeply, move quickly, and want to make a real difference.

What You’ll Bring

• 5+ years of experience in application security, securing cloud‑native environments at product‑focused tech companies, high‑growth startups, or leading AI labs.
• Strong programming and engineering skills.
• Deep expertise in application security: secure code review, threat modeling, SAST/DAST, supply chain security, product patching, and vulnerability management.
• Strong background in securing engineering infrastructure: CI/CD pipelines, secrets management, service‑to‑service authentication, containerized workloads, and public cloud platforms.
• Hands‑on experience collaborating with developers to design and implement security features and best practices.
• Passion for educating and mentoring engineers on secure coding, vulnerability remediation, and emerging threats.
• Systems mindset: comfortable reading and contributing to codebases, building security tooling, and integrating security into engineering workflows.
• Bonus: Experience building internal security tools or contributing to open‑source security projects.

What You’ll Do

• Conduct secure code reviews, threat modeling, and architecture assessments to identify and mitigate vulnerabilities early.
• Work closely with engineering teams to design and implement security features, provide actionable feedback, and ensure security is embedded in product development.
• Lead security training, workshops, and 1:1 mentoring to upskill developers and foster a security‑first culture.
• Integrate SAST/DAST and supply chain security tools into our CI/CD pipelines for continuous, automated protection.
• Detect, triage, and respond to application vulnerabilities and incidents, driving remediation and continuous improvement.
• Monitor and address emerging risks in AI infrastructure, LLM pipelines, and third‑party dependencies.
• Secure the last piece of software.

Our Tech Stack

• Frontend: React and Typescript
• Backend: Golang and Rust
• Cloud: Cloudflare, Google Cloud, AWS, Modal, Terraform
• DevOps & Tooling: CI/CD pipelines, observability, infrastructure‑as‑code

And always exploring what’s next.

How to Apply

• Please submit your application in English—our working language at Lovable.
• We’re committed to fair and equal treatment for all candidates. If you’re interested, apply via our careers portal