SME - IT security

Role overview

Responsibilities

• Design, develop, test, and maintain secure Android and iOS applications.
• Apply secure coding standards and enterprise security policies across the development lifecycle.
• Conduct code reviews, threat modelling, vulnerability assessments, security validation, and penetration-test remediation.
• Integrate authentication, authorization, encryption, certificate management, and secure API communication.
• Support CI/CD pipelines and automated security controls; monitor performance, security posture, and production stability.
• Participate in Agile planning and technical discussions; create technical documentation, security artefacts, and runbooks.
• Collaborate with UK and offshore teams and contribute to architecture reviews and technology roadmaps.

Required expertise

• Strong native Android development with Kotlin and Java, and native iOS development with Swift and Objective-C.
• Deep knowledge of mobile security, OWASP Mobile Top 10, secure coding, threat modelling, and vulnerability management.
• Hands-on authentication, encryption, secure key storage, token management, and transport layer security experience.
• Experience with app hardening, reverse-engineering protection, jailbreak/root detection, secure APIs, and mobile security testing.
• Agile delivery and enterprise-scale experience are described as essential.

Additional skills and experience

• Familiarity with CI/CD, Git-based source control, automated testing, and DevSecOps practices.
• Strong troubleshooting, debugging, and performance optimization capabilities.
• Financial services, insurance, telecommunications, or government experience is highly desirable.
• Cloud platforms, enterprise integration patterns, API ecosystems, and modern software engineering practices are listed as familiarity areas.