# Staff / Principal Software Engineer, Infrastructure Security

**Company:** [Lovable](https://hotfix.jobs/companies/lovable)
**Location:** Stockholm, Sweden
**Role:** Security Engineering
**Experience:** 8+ years
**Skills:** GCP, AWS, Cloudflare, IAM, Kms, Kubernetes, Terraform, Wiz, GitHub Actions, Slsa, Sigstore, Sboms, Go, Python, Rust
**Posted:** 2026-08-14

> Leads infrastructure security strategy and implementation across cloud, identity, runtime, and software supply chains. The role requires 8+ years of infrastructure or cloud security experience, staff/principal-level leadership, and hands-on expertise with major cloud and security platforms.

## Job Description

## Responsibilities
- Set the technical direction for cloud, identity, and build/runtime security.
- Design and ship guardrails for workload identity, least-privilege IAM, network segmentation, secrets management, and production access.
- Harden the software supply chain end to end, from developer laptops to production deployments.
- Partner with Platform, SRE, and the Apps Platform team to make secure paths easy to use.
- Mentor engineers across the company and raise the security bar by default.

## Requirements
- **8+ years** of experience in infrastructure or cloud security, including at least **3 years at staff or principal level**.
- Deep expertise in GCP, AWS, and Cloudflare security primitives, including IAM, networking, KMS, workload identity, and edge security.
- Hands-on experience with Kubernetes, Terraform, Wiz, GitHub Actions, and modern CI/CD.
- Knowledge of supply-chain security, including SLSA, Sigstore, and SBOMs.
- Comfort writing Go, Python, or Rust to ship security guardrails as code.
- Track record of measurably reducing blast radius involving secrets, lateral movement, and production access.

## Nice to Have
- Experience securing multi-tenant platforms.
- Experience securing LLM- or agent-driven infrastructure.

## Technology Stack
- **Frontend:** React, TypeScript
- **Backend:** Golang, Rust
- **Cloud:** Cloudflare, GCP, AWS, multiple LLM providers
- **DevOps and tooling:** GitHub Actions, Grafana, OTEL, Terraform
- **Data:** ClickHouse, Firestore, Spanner, BigQuery

## Similar jobs

- [Staff / Principal Software Engineer, Detection and Response](https://hotfix.jobs/jobs/f26e16c9-f4a3-4115-a29e-832eaa1e750a) - Lovable - Stockholm, Sweden
- [Senior Security GRC Analyst](https://hotfix.jobs/jobs/b54fb115-3bb7-4d88-8fdc-b7901d26d90d) - Monarch - Remote - $180k – $215k/yr
- [Lead Product GRC Subject Matter Expert](https://hotfix.jobs/jobs/57c937d5-05e3-4033-875a-890645c4aa6b) - Vanta - Remote - $230k – $270k/yr
- [Platform Security Engineer](https://hotfix.jobs/jobs/e556dd76-0f95-4dfa-9d3d-e476f24057c0) - Supabase - Remote
- [Security Engineer, Corporate](https://hotfix.jobs/jobs/dcd1e85d-0333-46e1-82bd-188613dd7173) - Lovable - Stockholm, Sweden

**Apply:** https://hotfix.jobs/jobs/661af102-7e71-41fb-b9ca-d0d1512b47ce
**Canonical:** https://hotfix.jobs/jobs/661af102-7e71-41fb-b9ca-d0d1512b47ce