Software Engineer (Mobile Security)

ARM; Hemel Hempstead; Hybrid; GBP 92,000 - 157,000; Full time

Job summary

Advanced Resource Managers is seeking a Mobile Security Software Engineer to join a Digital Frameworks team in a Bristol-based hybrid role. You will build secure Android and iOS frameworks and SDKs, implement authentication and encryption, and work across product teams to bolster mobile security across a large enterprise.

Ideal candidates have commercial mobile development experience (Kotlin/Android or Swift/iOS), knowledge of secure coding and vulnerability remediation, and experience with

Qualifications

• Commercial experience developing mobile apps using Kotlin/Android and/or Swift/iOS.
• Strong understanding of mobile application security principles.
• Experience implementing authentication, encryption and secure storage.
• Knowledge of secure coding practices and vulnerability remediation.
• Experience developing reusable SDKs, frameworks or shared components.
• Ability to work in CI/CD and automated testing environments.

Responsibilities

• Design, develop and maintain secure Android and iOS framework components and SDKs.
• Build mobile security capabilities including authentication, encryption and device integrity controls.
• Develop reusable libraries and platform services used across multiple apps.
• Support threat modelling and security design reviews.
• Identify and remediate security vulnerabilities.
• Implement secure coding standards and engineering best practices.
• Contribute to test automation and CI/CD pipelines.
• Collaborate with engineering, architecture and security teams.
• Drive continuous improvements in mobile security standards.

Skills

Kotlin/Android

Swift/iOS

Secure coding

Authentication & Authorization

Threat modelling

Mobile framework design

CI/CD

Secure storage

Code optimization

Job description

Software Engineer - Mobile Security
12-Month Contract
Bristol (Hybrid - 2-3 days per week onsite)
500- 850 per day Inside IR35 - Rate determined by experience

We're looking for Mobile Security Engineers to join a Digital Frameworks team responsible for building and maintaining the secure Android and iOS frameworks that support mobile applications across a large enterprise environment.

This role sits at the intersection of mobile software engineering and application security. You'll help design and develop reusable SDKs, libraries and framework components that enable product teams to deliver secure, scalable and high-performing mobile applications.

We're interested in speaking with engineers from Android, iOS or mobile platform backgrounds, with opportunities available across multiple levels of experience.

Key Requirements

• Commercial experience developing mobile applications using Kotlin/Android and/or Swift/iOS


• Strong understanding of mobile application security principles


• Experience implementing authentication, encryption and secure storage solutions


• Knowledge of secure coding practices and vulnerability remediation


• Experience developing reusable SDKs, frameworks or shared platform components


• Ability to work within modern engineering environments using CI/CD and automated testing practices

What You'll Be Doing

• Designing, developing and maintaining secure Android and iOS framework components and SDKs


• Building mobile security capabilities including authentication, encryption and device integrity controls


• Developing reusable libraries and platform services used across multiple applications


• Supporting threat modelling exercises and security design reviews


• Identifying and remediating security vulnerabilities
  
• Implementing secure coding standards and engineering best practice


• Contributing to test automation and CI/CD pipelines


• Collaborating with engineering, architecture and security teams


• Driving continuous improvements in mobile security standards and practices

Technical Skills

Mobile Development

• Kotlin


• Android


• Swift


• iOS


• SwiftUI


• UIKit


• Jetpack


• Android SDK


• Swift Package Manager

Mobile Security

• OWASP Mobile Top 10


• OWASP MASVS


• Mobile Application Security


• Secure Coding


• Threat Modelling


• Authentication & Authorisation


• Encryption


• Secure Storage


• Certificate Pinning


• Biometrics


• Android Keystore


• iOS Keychain


• Device Integrity Controls

Testing & Security Tooling

• JUnit


• XCTest


• Espresso


• XCUITest


• Static Analysis


• Dependency Scanning


• Penetration Test Remediation

CI/CD & DevOps

• Git


• GitHub Actions


• Jenkins


• Bitrise


• Fastlane


• CI/CD Pipelines

APIs & Identity

• REST APIs


• OAuth 2.0


• OpenID Connect


• API Security

Desirable Experience

• Financial Services, FinTech or regulated industries


• Digital Identity or Authentication products


• Shared Platform, SDK or Framework development


• Mobile security testing tools such as MobSF or Frida


• Security certifications including OSCP, GMOB, CISSP or equivalent

This is an excellent opportunity for a Mobile Engineer with a passion for security, or a Mobile Security Specialist looking to work on large-scale platforms that underpin critical mobile applications.

Disclaimer

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.