Software Engineer (Mobile Security)

ARM; Bristol; Hybrid; GBP 92,000 - 157,000; Full time

Job summary

ARM in Bristol is seeking a Mobile Security Engineer to join our Digital Frameworks team. You will design and maintain secure Android and iOS framework components and SDKs for large enterprise apps.

We welcome engineers from Android, iOS or mobile platform backgrounds, with opportunities across multiple levels. Hybrid role offering 2-3 days onsite and strong focus on security engineering and CI/CD practices.

Qualifications

• Commercial experience developing mobile applications for Android or iOS.
• Strong understanding of mobile security principles and secure coding.
• Experience implementing authentication, encryption and secure storage.
• Familiarity with CI/CD and automated testing practices.

Responsibilities

• Design, develop and maintain secure Android and iOS framework components and SDKs.
• Build mobile security capabilities including authentication and encryption.
• Develop reusable libraries and platform services across applications.
• Support threat modelling and security design reviews.
• Identify and remediate security vulnerabilities.
• Implement secure coding standards and engineering best practices.
• Contribute to test automation and CI/CD pipelines.
• Collaborate with engineering, architecture and security teams.
• Drive continuous improvements in mobile security standards.

Skills

Kotlin

Android

Swift

iOS

SwiftUI

UIKit

Jetpack

Android SDK

Swift Package Manager

Tools

Git

GitHub Actions

Jenkins

Bitrise

Fastlane

CI/CD Pipelines

Job description

Software Engineer - Mobile Security

12-Month Contract

Bristol (Hybrid - 2-3 days per week onsite)

£500-£850 per day Inside IR35 - Ratedetermined by experience

We're looking for Mobile Security Engineers to join a Digital Frameworks team responsible for building and maintaining the secure Android and iOS frameworks that support mobile applications across a large enterprise environment.

This role sits at the intersection of mobile software engineering and application security. You'll help design and develop reusable SDKs, libraries and framework components that enable product teams to deliver secure, scalable and high-performing mobile applications.

We're interested in speaking with engineers from Android, iOS or mobile platform backgrounds, with opportunities available across multiple levels of experience.

Key Requirements

• Commercial experience developing mobile applications using Kotlin/Android and/or Swift/iOS
• Strong understanding of mobile application security principles
• Experience implementing authentication, encryption and secure storage solutions
• Knowledge of secure coding practices and vulnerability remediation
• Experience developing reusable SDKs, frameworks or shared platform components
• Ability to work within modern engineering environments using CI/CD and automated testing practices

What You’ll Be Doing

• Designing, developing and maintaining secure Android and iOS framework components and SDKs
• Building mobile security capabilities including authentication, encryption and device integrity controls
• Developing reusable libraries and platform services used across multiple applications
• Supporting threat modelling exercises and security design reviews
• Identifying and remediating security vulnerabilities
• Implementing secure coding standards and engineering best practice
• Contributing to test automation and CI/CD pipelines
• Collaborating with engineering, architecture and security teams
• Driving continuous improvements in mobile security standards and practices

Technical Skills

Mobile Development

• Kotlin
• Android
• Swift
• iOS
• SwiftUI
• UIKit
• Jetpack
• Android SDK
• Swift Package Manager

Mobile Security

• OWASP Mobile Top 10
• OWASP MASVS
• Mobile Application Security
• Secure Coding
• Threat Modelling
• Authentication & Authorisation
• Encryption
• Secure Storage
• Certificate Pinning
• Biometrics
• Android Keystore
• iOS Keychain
• Device Integrity Controls

Testing & Security Tooling

• JUnit
• XCTest
• Espresso
• XCUITest
• Static Analysis
• Dependency Scanning
• Penetration Test Remediation

CI/CD & DevOps

• Git
• GitHub Actions
• Jenkins
• Bitrise
• Fastlane
• CI/CD Pipelines

APIs & Identity

• REST APIs
• OAuth 2.0
• OpenID Connect
• API Security

Desirable Experience

• Financial Services, FinTech or regulated industries
• Digital Identity or Authentication products
• Shared Platform, SDK or Framework development
• Mobile security testing tools such as MobSF or Frida
• Security certifications including OSCP, GMOB, CISSP or equivalent

This is an excellent opportunity for a Mobile Engineer with a passion for security, or a Mobile Security Specialist looking to work on large-scale platforms that underpin critical mobile applications.