Software Engineer (Mobile Security)

We’re looking for Mobile Security Engineers to join a Digital Frameworks team responsible for building and maintaining the secure Android and iOS frameworks that support mobile applications across a large enterprise environment.

This role sits at the intersection of mobile software engineering and application security. You’ll help design and develop reusable SDKs, libraries and framework components that enable product teams to deliver secure, scalable and high-performing mobile applications.

We’re interested in speaking with engineers from Android, iOS or mobile platform backgrounds, with opportunities available across multiple levels of experience., * Designing, developing and maintaining secure Android and iOS framework components and SDKs

• Building mobile security capabilities including authentication, encryption and device integrity controls
• Developing reusable libraries and platform services used across multiple applications
• Supporting threat modelling exercises and security design reviews
• Identifying and remediating security vulnerabilities
• Implementing secure coding standards and engineering best practice
• Contributing to test automation and CI/CD pipelines
• Collaborating with engineering, architecture and security teams
• Driving continuous improvements in mobile security standards and practices

Technical Skills

Mobile Development

• Kotlin
• Android
• Swift
• iOS
• SwiftUI
• UIKit
• Jetpack
• Android SDK
• Swift Package Manager

Mobile Security

• OWASP Mobile Top 10
• OWASP MASVS
• Mobile Application Security
• Secure Coding
• Threat Modelling
• Authentication & Authorisation
• Encryption
• Secure Storage
• Certificate Pinning
• Biometrics
• Android Keystore
• iOS Keychain
• Device Integrity Controls

Testing & Security Tooling

• JUnit
• XCTest
• Espresso
• XCUITest
• Static Analysis
• Dependency Scanning
• Penetration Test Remediation

CI/CD & DevOps

• Git
• GitHub Actions
• Jenkins
• Bitrise
• Fastlane
• CI/CD Pipelines

APIs & Identity

• REST APIs
• OAuth 2.0
• OpenID Connect
• API Security

• Commercial experience developing mobile applications using Kotlin/Android and/or Swift/iOS
• Strong understanding of mobile application security principles
• Experience implementing authentication, encryption and secure storage solutions
• Knowledge of secure coding practices and vulnerability remediation
• Experience developing reusable SDKs, frameworks or shared platform components
• Ability to work within modern engineering environments using CI/CD and automated testing practices, * Financial Services, FinTech or regulated industries
• Digital Identity or Authentication products
• Shared Platform, SDK or Framework development
• Mobile security testing tools such as MobSF or Frida
• Security certifications including OSCP, GMOB, CISSP or equivalent

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited (“ARM”). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.