Security Engineer: Identity & AI Tools at Scale

Lovable; Stockholms kommun; On-site; SEK 900,000 - 1,500,000; Full time

Job summary

Lovable is the software creation platform powering ideas with speed and security. The security lead will own Lovable's corporate environment, covering identity, endpoints, SaaS, email, and AI tools we live in.

You will implement scalable controls such as passkeys, device trust, conditional access, DLP, and SSPM, while running phishing awareness programs to change behavior. The ideal candidate has 5+ years in enterprise security and strong programming skills.

Qualifications

• 5+ years in corporate, enterprise, or endpoint security at a fast-growing tech company.
• Deep expertise in identity (Google Workspace/Okta/Entra, SSO, SCIM, conditional access), MDM (Jamf/Kandji/Intune), and SaaS security posture (SSPM).
• You can write code (Python, Bash, or Go) and treat policies as software - versioned, tested, deployed.
• Strong instincts for phishing, social engineering, and insider risk - including the new AI-flavored variants.
• Pragmatic about UX. You know when a control is real security and when it's just friction.

Responsibilities

• Own the security of Lovable's corporate environment: identity, endpoints, SaaS, email, and the AI tools we live in.
• Roll out and maintain controls that scale - passkeys, device trust, conditional access, DLP, SSPM.
• Run phishing, awareness, and tabletop programs that actually change behavior.
• Partner with IT and Detection & Response to make detection of insider and account-takeover risk first-class.
• Make the secure path the default path - and the obvious one.

Skills

Identity security

MDM management

SaaS security posture

Policy as code

Phishing/insider risk

Secure UX

AI tools security

Job description

Lovable is the software creation platform powering ideas with speed and security. The security lead will own Lovable's corporate environment, covering identity, endpoints, SaaS, email, and AI tools we live in.

You will implement scalable controls such as passkeys, device trust, conditional access, DLP, and SSPM, while running phishing awareness programs to change behavior. The ideal candidate has 5+ years in enterprise security and strong programming skills.