Software Engineer - Security

Board Intelligence is a technology and advisory firm on a mission to make boards more effective, and through them, build better businesses and benefit society.

Over twenty years we have established ourselves as the market leader in governance and board effectiveness, trusted by more than 80,000 directors, executives, and governance professionals globally, including across the Fortune 500, FTSE 100, and OMX 30. That trust has been earned through depth of insight, rigorous advisory work, and a track record that newer entrants simply cannot replicate.

We have invested in applied AI since 2020, well ahead of the market, and that early conviction has paid off. Our AI-powered platform and smart board advisor give us a competitive advantage that is widening, not narrowing. In 2024, K1 Investment Management, the leading B2B Enterprise SaaS investor, backed us to accelerate that position further. We are now growing fast, with a proven commercial model spanning both mid-market and enterprise, and a product suite that has become a necessary addition in high-stakes board environments.

The people joining us now will shape how we scale. We are deliberate about how we do that. Our founders and leadership team are deeply invested in keeping the culture that got us here: thoughtful, high calibre, and genuinely human. Ambition and balance are not in competition at Board Intelligence.

If you want to work at the intersection of AI and governance, on problems that matter at the highest level, this is a strong place to be.

Our Mission

We unleash the potential of organisations through the science of board effectiveness, building better businesses and benefitting society.

The Role: Board Intelligence's clients include some of the most heavily regulated organisations in the world, and they trust us with highly sensitive board information. Security is fundamental to everything we build.

We are looking for a Software Engineer to lead security across our engineering teams. This is not a client-facing or product role. You will work across all of engineering, closely with our CISO, our CTO and our engineering leaders, bringing engineering skills to our security function and raising the bar on how we build securely. You will have the backing of the CTO and CISO, and real freedom to make change.

We want an engineer who is drawn to security, rather than a security specialist or penetration tester who has picked up some engineering. You will start by building strong foundations, then move on to the most exciting part of the role: using AI agents to test our applications continuously.

Main Responsibilities:

• Build a clear picture of where our engineering security stands today, and agree a plan to improve it with the CTO and CISO

• Bring consistent security tooling into every pipeline, including credential scanning, software composition analysis (SCA), static application security testing (SAST) and dynamic application security testing (DAST)

• Configure that tooling to our standards so it helps engineers rather than creating noise they learn to ignore

• Review system designs and architecture with engineering teams, applying security thinking early

• Build agentic security testing: AI agents that continuously test our applications and alert engineers to issues

• Work closely with our CISO and security team, turning security goals into working systems

• Help engineers across the business build securely, through tooling, guidance and example

Person Specification: We are looking for an engineer with a genuine interest in security, who wants to make it their focus and is excited by the freedom to build something from the ground up.

Required Skills and Experience

• Mid-level to senior experience building production systems, in any language

• Strong system design skills, including reading architecture diagrams and spotting the security risks in them

• A genuine interest in security and a clear motivation to make it the focus of your work

• A good understanding of secure development practices and common application vulnerabilities

• Experience working with CI/CD pipelines

• The ability to influence engineers and win support for change without formal authority

• Experience using AI coding tools in your day-to-day work

• Fluent written and spoken English

Nice to haves

• Experience introducing security tooling, such as SAST, DAST, SCA or secret scanning, into an enterprise

• DevOps experience in a regulated enterprise, such as financial services

• Experience building AI agents or LLM-based automation

What good looks like in this role

• After three months: you understand our systems and how we build them, and you have agreed a clear security plan with the CTO and CISO. You have an initial view of our current engineering security posture

• After six months: security scanning runs in every pipeline, tuned so that engineers trust it and act on it

• After twelve months: agentic security testing is continuously testing our applications, and security is part of how every team designs and builds