Software Engineer (Mobile Security)
Software Engineer - Mobile Security
12-Month Contract
Bristol (Hybrid - 2-3 days per week onsite)
£500-£850 per day Inside IR35 - Rate determined by experience
We're looking for Mobile Security Engineers to join a Digital Frameworks team responsible for building and maintaining the secure Android and iOS frameworks that support mobile applications across a large enterprise environment.
This role sits at the intersection of mobile software engineering and application security. You'll help design and develop reusable SDKs, libraries and framework components that enable product teams to deliver secure, scalable and high-performing mobile applications.
We're interested in speaking with engineers from Android, iOS or mobile platform backgrounds, with opportunities available across multiple levels of experience.
Key Requirements
- Commercial experience developing mobile applications using Kotlin/Android and/or Swift/iOS
- Strong understanding of mobile application security principles
- Experience implementing authentication, encryption and secure storage solutions
- Knowledge of secure coding practices and vulnerability remediation
- Experience developing reusable SDKs, frameworks or shared platform components
- Ability to work within modern engineering environments using CI/CD and automated testing practices
What You'll Be Doing
- Designing, developing and maintaining secure Android and iOS framework components and SDKs
- Building mobile security capabilities including authentication, encryption and device integrity controls
- Developing reusable libraries and platform services used across multiple applications
- Supporting threat modelling exercises and security design reviews
- Identifying and remediating security vulnerabilities
- Implementing secure coding standards and engineering best practice
- Contributing to test automation and CI/CD pipelines
- Collaborating with engineering, architecture and security teams
- Driving continuous improvements in mobile security standards and practices
Technical Skills
Mobile Development
- Kotlin
- Android
- Swift
- iOS
- SwiftUI
- UIKit
- Jetpack
- Android SDK
- Swift Package Manager
Mobile Security
- OWASP Mobile Top 10
- OWASP MASVS
- Mobile Application Security
- Secure Coding
- Threat Modelling
- Authentication & Authorisation
- Encryption
- Secure Storage
- Certificate Pinning
- Biometrics
- Android Keystore
- iOS Keychain
- Device Integrity Controls
Testing & Security Tooling
- JUnit
- XCTest
- Espresso
- XCUITest
- Static Analysis
- Dependency Scanning
- Penetration Test Remediation
CI/CD & DevOps
- Git
- GitHub Actions
- Jenkins
- Bitrise
- Fastlane
- CI/CD Pipelines
APIs & Identity
- REST APIs
- OAuth 2.0
- OpenID Connect
- API Security
Desirable Experience
- Financial Services, FinTech or regulated industries
- Digital Identity or Authentication products
- Shared Platform, SDK or Framework development
- Mobile security testing tools such as MobSF or Frida
- Security certifications including OSCP, GMOB, CISSP or equivalent
This is an excellent opportunity for a Mobile Engineer with a passion for security, or a Mobile Security Specialist looking to work on large-scale platforms that underpin critical mobile applications.
Disclaimer:
This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.