Requirements

5+ years in corporate, enterprise, or endpoint security at a fast-growing tech company.
Deep expertise in identity (Google Workspace/Okta/Entra, SSO, SCIM, conditional access), MDM (Jamf/Kandji/Intune), and SaaS security posture (SSPM).
You can write code (Python, Bash, or Go) and treat policies as software - versioned, tested, deployed.
Strong instincts for IT risks such as phishing, social engineering, and insider risk - including the new AI-flavored variants.
Pragmatic about UX. You know when a control is real security and when it's just friction.

Nice to Haves

Experience securing AI tools and agents in the workplace (Claude, ChatGPT, Cursor, et al).
Experience managing hardware security keys.

Own the security of Lovable's corporate environment: identity, endpoints, SaaS, email, and the AI tools we live in.
Roll out and maintain controls that scale - passkeys, device trust, conditional access, DLP, SSPM.
Run phishing, awareness, and tabletop programs that actually change behavior.
Work on Detection & Response to make detection of insider and account-takeover risk first-class.
Secure and optimize our diverse AI toolstack, including Lovable itself, working closely with the product team on feedback and iterations.
Help the Security and GRC teams make least-privilege the default and auditability free.
Ensure the right data is surfaced to the right people, while implementing data classifications and reducing the risk of data loss.

Submit your application in English, the company language.
All candidates are treated equally.
Opportunity to work in a fast-growing AI company at the forefront of software innovation.