Software Engineer - Security

Board Intelligence's clients include some of the most heavily regulated organisations in the world, and they trust us with highly sensitive board information. Security is fundamental to everything we build.

We are looking for a Software Engineer to lead security across our engineering teams. This is not a client-facing or product role. You will work across all of engineering, closely with our CISO, our CTO and our engineering leaders, bringing engineering skills to our security function and raising the bar on how we build securely. You will have the backing of the CTO and CISO, and real freedom to make change.

We want an engineer who is drawn to security, rather than a security specialist or penetration tester who has picked up some engineering. You will start by building strong foundations, then move on to the most exciting part of the role: using AI agents to test our applications continuously.

• Build a clear picture of where our engineering security stands today, and agree a plan to improve it with the CTO and CISO

• Bring consistent security tooling into every pipeline, including credential scanning, software composition analysis (SCA), static application security testing (SAST) and dynamic application security testing (DAST)

• Configure that tooling to our standards so it helps engineers rather than creating noise they learn to ignore

• Review system designs and architecture with engineering teams, applying security thinking early

• Build agentic security testing: AI agents that continuously test our applications and alert engineers to issues

• Work closely with our CISO and security team, turning security goals into working systems

• Help engineers across the business build securely, through tooling, guidance and example

We are looking for an engineer with a genuine interest in security, who wants to make it their focus and is excited by the freedom to build something from the ground up.

Required Skills and Experience

• Mid-level to senior experience building production systems, in any language

• Strong system design skills, including reading architecture diagrams and spotting the security risks in them

• A genuine interest in security and a clear motivation to make it the focus of your work

• A good understanding of secure development practices and common application vulnerabilities

• Experience working with CI/CD pipelines

• The ability to influence engineers and win support for change without formal authority

• Experience using AI coding tools in your day-to-day work

• Fluent written and spoken English

Nice to haves

• Experience introducing security tooling, such as SAST, DAST, SCA or secret scanning, into an enterprise

• DevOps experience in a regulated enterprise, such as financial services

• Experience building AI agents or LLM-based automation

What good looks like in this role

• After three months: you understand our systems and how we build them, and you have agreed a clear security plan with the CTO and CISO. You have an initial view of our current engineering security posture

• After six months: security scanning runs in every pipeline, tuned so that engineers trust it and act on it

• After twelve months: agentic security testing is continuously testing our applications, and security is part of how every team designs and builds