Software Engineer - Security

The Role

Board Intelligence's clients include some of the most heavily regulated organisations in the world, and they trust us with highly sensitive board information. Security is fundamental to everything we build.

We are looking for a Software Engineer to lead security across our engineering teams. This is not a client-facing or product role. You will work across all of engineering, closely with our CISO, our CTO and our engineering leaders, bringing engineering skills to our security function and raising the bar on how we build securely. You will have the backing of the CTO and CISO, and real freedom to make change.

We want an engineer who is drawn to security, rather than a security specialist or penetration tester who has picked up some engineering. You will start by building strong foundations, then move on to the most exciting part of the role: using AI agents to test our applications continuously.

Main Responsibilities

Build a clear picture of where our engineering security stands today, and agree a plan to improve it with the CTO and CISO

Bring consistent security tooling into every pipeline, including credential scanning, software composition analysis (SCA), static application security testing (SAST) and dynamic application security testing (DAST)

Configure that tooling to our standards so it helps engineers rather than creating noise they learn to ignore

Review system designs and architecture with engineering teams, applying security thinking early

Build agentic security testing: AI agents that continuously test our applications and alert engineers to issues

Work closely with our CISO and security team, turning security goals into working systems

Help engineers across the business build securely, through tooling, guidance and example

Person Specification

We are looking for an engineer with a genuine interest in security, who wants to make it their focus and is excited by the freedom to build something from the ground up.

Required Skills and Experience

Mid-level to senior experience building production systems, in any language

Strong system design skills, including reading architecture diagrams and spotting the security risks in them

A genuine interest in security and a clear motivation to make it the focus of your work

A good understanding of secure development practices and common application vulnerabilities

Experience working with CI/CD pipelines

The ability to influence engineers and win support for change without formal authority

Experience using AI coding tools in your day-to-day work

Fluent written and spoken English

Nice to haves

Experience introducing security tooling, such as SAST, DAST, SCA or secret scanning, into an enterprise

DevOps experience in a regulated enterprise, such as financial services

Experience building AI agents or LLM-based automation

What good looks like in this role

After three months: you understand our systems and how we build them, and you have agreed a clear security plan with the CTO and CISO. You have an initial view of our current engineering security posture

After six months: security scanning runs in every pipeline, tuned so that engineers trust it and act on it

After twelve months: agentic security testing is continuously testing our applications, and security is part of how every team designs and builds