About the role
TL;DR We're looking for a FullStack Engineer who lives and breathes AI code security. You'll design and build our static code analysis and security scanning capabilities, making Lovable the most secure AI-powered software creation platform on the planet. Why Lovable? Lovable enables anyone to build software with plain English. From solopreneurs to Fortune 100 teams, millions use Lovable to turn ideas into real products—fast. We're leading a foundational shift in software creation, giving you a unique opportunity to shape the digital world. With over 2 million users in 200+ countries, our impact is global—and we're just getting started. We're a small, high-caliber team in Stockholm, building a generation-defining company. We value high ownership, rapid iteration, and low-ego collaboration. We seek people who care deeply about their craft, challenge us, and are driven to make a lasting impact.
What We're Looking For 3+ years of experience in code security, static analysis, or code scanning , ideally building or contributing to security-focused products (SAST, linters, vulnerability scanners, or similar - with AI or advanced machine learning techniques). 5+ years of full-stack engineering experience shipping high-quality products. Proficiency in modern frontend (React/TypeScript) and backend (Golang, Rust) development. Solid understanding of systems design, performance tradeoffs, and scalable architecture. Strong product sense and ability to translate security findings into intuitive, actionable user experiences.
Bonus: Master's or PhD in code analysis, static analysis, or a related field. Experience integrating AI/LLMs into security tooling. Familiarity with mobile app security scanning.
What You'll Do Build out our code scanning engine: Design and implement static analysis and security scanning that surfaces findings in user-generated application code across web and mobile. Ship features end-to-end across frontend, backend, and infrastructure as part of a small, self-sufficient team (≤3 engineers). Integrate AI/LLM capabilities into security workflows to detect, explain, and remediate vulnerabilities. Advocate for secure coding practices, conduct security-focused code reviews, and raise the bar across the engineering org. Influence our technical direction and product strategy with a security-first mindset. Help make Lovable the most secure AI product in the market. Our Tech Stack Frontend: React and Typescript. Backend: Golang and Rust. Cloud: Cloudflare, GCP, AWS, Modal, multiple LLM providers. DevOps & Tooling: GitHub Actions, Grafana, OTEL, infra-as-code (Terraform). Data: Clickhouse, Firestore, Spanner, BigQuery. And we’re always exploring what’s next! How to Apply Please submit your application in English—our working language at Lovable. We’re committed to fair and equal treatment for all candidates. If you’re interested, apply via our careers portal