{"id":69894,"url":"https://alion.io/job/lovable-documentation-staff-principal-software-engineer-detection-and-response","title":"Staff / Principal Software Engineer, Detection and Response","company":{"id":17849,"name":"Lovable","domain":"lovable.dev","url":"https://alion.io/company/lovable","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":83,"open_postings":28,"ghost_share":0,"stale_share":0.679,"repost_share":0,"time_to_fill_p50_days":47,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Stockholm, Sweden"],"countries":["SE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":70000,"max_usd":208000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1965},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"ClickHouse","optional":false},{"name":"Cloudflare","optional":false},{"name":"Commander.js","optional":false},{"name":"GCP","optional":false},{"name":"LLM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Snowflake","optional":false},{"name":"BigQuery","optional":true},{"name":"Firestore","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Go","optional":true},{"name":"Google BigQuery","optional":true},{"name":"Google Cloud Spanner","optional":true},{"name":"Grafana","optional":true},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true},{"name":"React.js","optional":true},{"name":"Rust","optional":true},{"name":"Terraform","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-08-14T09:59:09Z","employer_posted_date":"2026-09-14","last_verified_at":"2026-10-18T08:54:18Z","board_verified":true,"closed_at":null,"days_open":64,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":64},"description":"TL;DR You'll build the detection and response capability that catches attackers before they matter - across Lovable's corporate, production, and AI-agent surfaces.\nWhy Lovable?\nLovable is the software creation platform that gives people the power to act on the problems closest to them. For decades, turning an idea into software required so much capital, technical fluency, and time that many ideas never came to life. Lovable is the counterargument: a platform for all people with ideas, ambition, and problems worth solving. From solopreneurs to small business owners to teams at companies like Adidas and Zendesk, people have built over 60 million projects on Lovable since its launch in November 2024. And we’re just getting started.\nWe’re building a generational company from Stockholm, with growing teams in London, Boston, New York, and San Francisco. Our team is small, talent-dense, and moving quickly, with a culture rooted in extreme ownership, high velocity, and low-ego collaboration. We look for people who care deeply, ship fast, and are eager to make a dent in the world.\nLovable is one of TIME’s 100 Most Influential Companies and has been recognized on the Forbes AI 50 and CNBC Disruptor 50, reflecting our momentum as one of Europe’s fastest-growing AI companies and one of the most ambitious places to build in this next era of software.\nWhat we're looking for\n8+ years in detection engineering, incident response, or threat hunting, with at least 3 at staff/principal level.\n\nStrong engineering background - you build detections as code, not as saved searches in a SIEM.\n\nDeep experience with cloud telemetry (GCP/AWS/Cloudflare), endpoint EDR, identity logs, and modern SIEM/data-lake stacks (Panther, Elastic, Snowflake/Clickhouse).\n\nBattle-tested incident commander who has led real high-severity incidents from first alert to public post-mortem.\n\nAdversary-minded: comfortable with MITRE ATT&CK, threat intel, purple-teaming, and red team collaboration.\n\nBonus: detection for LLM/agent abuse, prompt injection at scale, or insider risk in AI-augmented engineering orgs.\n\nWhat you'll do\nBuild the detection engineering platform - pipelines, detections-as-code, automated triage, and response playbooks.\n\nDesign and own security incident response process with 24/7 coverage, with a small, high-leverage human and agent team.\n\nLead incidents end-to-end: detection, containment, eradication, post-mortem, and follow-through.\n\nHunt proactively across corporate, production, and AI-agent surfaces - and turn every finding into a durable detection.\n\nDefine what 'world-class D&R for an AI-native company' looks like, and build it.\n\nOur tech stack\nFrontend: React and Typescript.\n\nBackend: Golang and Rust.\n\nCloud: Cloudflare, GCP, AWS, multiple LLM providers.\n\nDevOps & Tooling: GitHub Actions, Grafana, OTEL, infra-as-code (Terraform).\n\nData: Clickhouse, Firestore, Spanner, BigQuery.\n\nAnd we’re always exploring what’s next!\nAbout your application\nPlease submit your application in English. It’s our company language, so you’ll be speaking lots of it if you join.\nWe treat all candidates equally - if you’re interested, please apply through our careers portal.","description_format":"text","description_chars":3182,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Development Tools","Low-Code & No-Code Platforms"],"lifecycle":[{"event":"open","at":"2026-08-14T09:59:09Z"}],"visa":[],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.5,"p_room":0.44,"age_days":63,"expected_fill_days":47,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/lovable-documentation-staff-principal-software-engineer-detection-and-response","json_url":"https://alion.io/job/lovable-documentation-staff-principal-software-engineer-detection-and-response.json","meta":{"generated_at":"2026-10-18T09:57:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14747,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17849},"rest":"https://alion.io/mcp/rest/get_company?id=17849"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flovable-documentation-staff-principal-software-engineer-detection-and-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flovable-documentation-staff-principal-software-engineer-detection-and-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flovable-documentation-staff-principal-software-engineer-detection-and-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/lovable-documentation-staff-principal-software-engineer-detection-and-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flovable-documentation-staff-principal-software-engineer-detection-and-response"}]}