Software Engineer (Mobile Security)

Arm; Gloucester; Hybrid; GBP 92,000 - 157,000; Full time

Job summary

Arm is seeking a Software Engineer - Mobile Security for a 12-month contract in Bristol, with hybrid work (2-3 days on-site). The role focuses on building secure Android and iOS frameworks and SDKs for a large enterprise environment.

You will work at the intersection of mobile software engineering and application security to enable secure, scalable mobile apps. The position welcomes engineers from Android, iOS or mobile platform backgrounds, with levels ranging by experience.

Qualifications

• Commercial experience building mobile apps for Android or iOS
• Strong understanding of mobile app security principles
• Experience implementing authentication, encryption and secure storage
• Knowledge of secure coding practices and vulnerability remediation
• Experience developing reusable SDKs, frameworks or shared components
• Familiarity with CI/CD and automated testing practices

Responsibilities

• Design, develop and maintain secure Android and iOS framework components and SDKs
• Build mobile security capabilities including authentication, encryption and device integrity controls
• Develop reusable libraries and platform services used across apps
• Support threat modelling and security design reviews
• Identify and remediate security vulnerabilities
• Implement secure coding standards and engineering best practices
• Contribute to test automation and CI/CD pipelines
• Collaborate with engineering, architecture and security teams
• Drive continuous improvements in mobile security standards and practices

Skills

Kotlin/Android or Swift/iOS

Mobile security principles

Secure coding practices

SDK/framework development

CI/CD / automated testing

Tools

Android SDK

Swift Package Manager

GitHub Actions

Jenkins

Fastlane

Job description

Software Engineer - Mobile Security
12-Month Contract
Bristol (Hybrid - 2-3 days per week onsite)
500- 850 per day Inside IR35 - Ratedetermined by experience

We're looking for Mobile Security Engineers to join a Digital Frameworks team responsible for building and maintaining the secure Android and iOS frameworks that support mobile applications across a large enterprise environment.

This role sits at the intersection of mobile software engineering and application security. You'll help design and develop reusable SDKs, libraries and framework components that enable product teams to deliver secure, scalable and high-performing mobile applications.

We're interested in speaking with engineers from Android, iOS or mobile platform backgrounds, with opportunities available across multiple levels of experience.

Key Requirements

• Commercial experience developing mobile applications using Kotlin/Android and/or Swift/iOS
• Strong understanding of mobile application security principles
• Experience implementing authentication, encryption and secure storage solutions
• Knowledge of secure coding practices and vulnerability remediation
• Experience developing reusable SDKs, frameworks or shared platform components
• Ability to work within modern engineering environments using CI/CD and automated testing practices

What You'll Be Doing

• Designing, developing and maintaining secure Android and iOS framework components and SDKs
• Building mobile security capabilities including authentication, encryption and device integrity controls
• Developing reusable libraries and platform services used across multiple applications
• Supporting threat modelling exercises and security design reviews
• Identifying and remediating security vulnerabilities
• Implementing secure coding standards and engineering best practice
• Contributing to test automation and CI/CD pipelines
• Collaborating with engineering, architecture and security teams
• Driving continuous improvements in mobile security standards and practices

Technical Skills

Mobile Development

• Kotlin
• Android
• Swift
• iOS
• SwiftUI
• UIKit
• Jetpack
• Android SDK
• Swift Package Manager

Mobile Security

• OWASP Mobile Top 10
• OWASP MASVS
• Mobile Application Security
• Secure Coding
• Threat Modelling
• Authentication & Authorisation
• Encryption
• Secure Storage
• Certificate Pinning
• Biometrics
• Android Keystore
• iOS Keychain
• Device Integrity Controls

Testing & Security Tooling

• JUnit
• XCTest
• Espresso
• XCUITest
• Static Analysis
• Dependency Scanning
• Penetration Test Remediation

CI/CD & DevOps

• Git
• GitHub Actions
• Jenkins
• Bitrise
• Fastlane
• CI/CD Pipelines

APIs & Identity

• REST APIs
• OAuth 2.0
• OpenID Connect
• API Security

Desirable Experience

• Financial Services, FinTech or regulated industries
• Digital Identity or Authentication products
• Shared Platform, SDK or Framework development
• Mobile security testing tools such as MobSF or Frida
• Security certifications including OSCP, GMOB, CISSP or equivalent

This is an excellent opportunity for a Mobile Engineer with a passion for security, or a Mobile Security Specialist looking to work on large-scale platforms that underpin critical mobile applications.