Penetration Tester

Lovable; Stockholms kommun; On-site; SEK 646,690 - 970,036; Full time

Job summary

Lovable is looking for a seasoned security expert to own offensive security end-to-end. With over 12 years of experience in penetration testing, you'll probe AI integrations and identify vulnerabilities while ensuring the security of Lovable's platforms.

Your role will not only involve executing tests but also collaborating closely with the engineering team to prioritize and remediate findings. Join us to help make Lovable the most secure AI product on the market.

Qualifications

• 12+ years of hands-on penetration testing experience across various platforms.
• Proven track record of CVEs and contributions in bug bounty programs.
• Experience probing AI-native products and LLM-integrated systems.

Responsibilities

• Plan and execute penetration tests across Lovable's platforms.
• Probe AI integrations for vulnerabilities and attack vectors.
• Work with engineering to remediate and verify fixes.

Skills

Penetration testing

Offensive security techniques

AI hacking workflows

Cloud environments

Collaborative mindset

Job description

What we’re looking for

• 12+ years of hands‑on penetration testing experience across web, mobile, APIs, and cloud infrastructure.
• A track record of CVEs and credits in major bug bounty programs.
• Deep expertise in offensive security techniques: OWASP, MITRE ATT&CK, exploit development, privilege escalation, and lateral movement.
• Hands‑on experience using AI as part of a hacking workflow, including leveraging AI to conduct attacks.
• Experience attacking AI‑native products or LLM‑integrated systems, covering prompt injection, model abuse, and data exfiltration vectors.
• Strong understanding of cloud environments (GCP, AWS, Cloudflare) and the associated attack surfaces.
• Ability to translate complex findings into clear, prioritised reports for engineering teams.
• Low ego, high output, collaborative mindset.
• Bonus: experience with red team operations, supply chain attacks, mobile security (iOS/Android), or familiarity with SAST/DAST tooling.

What you’ll do

• Own offensive security end‑to‑end: plan and execute penetration tests across Lovable’s web platform, mobile surface, APIs, cloud infrastructure, and AI pipelines.
• Break our AI before others do: probe LLM integrations for prompt injection, jailbreaks, data leakage, and novel AI‑specific attack vectors.
• Stress‑test user‑generated code at scale: identify systemic vulnerabilities introduced by millions of users deploying real applications on our platform.
• Turn findings into action: work directly with engineering to prioritise, remediate, and verify fixes, closing the discovery‑resolution loop.
• Raise the security bar org‑wide: run internal red team exercises, contribute to threat modelling, and embed an attacker’s mindset across engineering culture.
• Help make Lovable the most secure AI product in the market.

We treat all candidates equally – please apply through our careers portal.