Staff / Principal Software Engineer, Detection and Response
StockholmFull-timePosted 2mo ago
About the role
You’ll build the detection and response capability that catches attackers before they matter - across Lovable's corporate, production, and AI-agent surfaces.
Responsibilities
- Build the detection engineering platform - pipelines, detections-as-code, automated triage, and response playbooks.
- Design and own security incident response process with 24/7 coverage, with a small, high-leverage human and agent team.
- Lead incidents end-to-end: detection, containment, eradication, post-mortem, and follow-through.
- Hunt proactively across corporate, production, and AI-agent surfaces - and turn every finding into a durable detection.
- Define what 'world-class D&R for an AI-native company' looks like, and build it.
Qualifications
- 8+ years in detection engineering, incident response, or threat hunting, with at least 3 at staff/principal level.
- Strong engineering background - you build detections as code, not as saved searches in a SIEM.
- Deep experience with cloud telemetry (GCP/AWS/Cloudflare), endpoint EDR, identity logs, and modern SIEM/data-lake stacks (Panther, Elastic, Snowflake/Clickhouse).
- Battle-tested incident commander who has led real high-severity incidents from first alert to public post-mortem.
- Adversary-minded: comfortable with MITRE ATT&CK, threat intel, purple-teaming, and red team collaboration.
- Bonus: detection for LLM/agent abuse, prompt injection at scale, or insider risk in AI-augmented engineering orgs.
Skills
Required:Detection engineeringIncident response leadershipThreat intelligence & MITRE ATT&CKCloud telemetry and EDR
Last updated Sep 9, 2026. Interested? Apply on the company site.
About Lovable
Build something
Build software products, using only a chat interface
ai coderai developerai engineerai full stack engineerai software engineerai web agencyai website builderai-infrastructure-and-development
More open roles at Lovable
- Partner Operations Manager4d agoStockholm · GTM
- Technical Writer1w agoStockholm · EPD
- Data Infrastructure Engineer1w agoStockholm, London · EPD
- Growth Engineer1w agoLondon · EPD
- Marketing Growth Engineer2w agoLondon · EPD