Penetration Tester

Responsibilities

• Own offensive security end-to-end by planning and executing penetration tests across web, mobile, APIs, cloud infrastructure, and AI pipelines
• Probe LLM integrations for prompt injection, jailbreaks, data leakage, and novel attack vectors
• Stress-test user-generated code at scale to identify systemic vulnerabilities
• Work directly with engineering to prioritize, remediate, and verify security fixes
• Run internal red team exercises and contribute to threat modeling to embed an attacker's mindset across the organization

Requirements

• 12+ years of hands-on penetration testing experience across web, mobile, APIs, and cloud infrastructure
• Proven track record in the field, such as CVEs, bug bounty hall-of-fame credits, or a strong industry reputation
• Deep expertise in offensive security techniques including OWASP, MITRE ATT&CK, exploit development, and privilege escalation
• Experience using AI as an offensive tool and attacking AI-native products or LLM-integrated systems
• Strong understanding of cloud environments including GCP, AWS, and Cloudflare
• Ability to translate complex findings into clear, prioritized reports for engineering teams

Preferred Qualifications

• Experience with red team operations or supply chain attacks
• Mobile security expertise (iOS/Android)
• Familiarity with SAST/DAST tooling

About the Company

Lovable lets anyone and everyone build software with any language. We are a small, talent-dense team building a generation-defining company from Stockholm, helping millions of people transform raw ideas into real products fast.