Offensive Security Engineer; Mobile - South East

Salary

£75,000 - 75,000 per year

• We require at least 4 years of experience in red teaming, penetration testing, or mobile security research.
• We require strong expertise in Android and/or iOS application security.
• We require hands‑on experience with tools such as Frida, Ghidra, Hopper, IDA Pro, and Burp Suite.
• We require experience analysing APK and IPA binaries.
• We require the ability to bypass certificate pinning, anti‑debugging, and anti‑tamper controls.
• We require a strong understanding of Android and iOS security models.
• We require knowledge of secure storage, including Keychain and Keystore.
• We require a solid understanding of cryptographic implementations and OAuth/authentication protocols.
• We require scripting and automation skills to build custom testing tools.
• We require excellent communication skills and the ability to explain findings clearly.
• We value experience with biometric systems and identity verification technologies.
• We value a security research background, open‑source tooling contributions, or vulnerability research experience.
• We value exposure to threat modelling and secure architecture reviews.

• We conduct advanced mobile application penetration testing across iOS and Android.
• We perform reverse engineering, runtime manipulation, and instrumentation attacks.
• We simulate realistic adversarial scenarios using rooted and jail broken devices, emulator and Frida‑based attacks, certificate pinning bypass, session manipulation, API abuse, biometric spoofing, and presentation attacks.
• We identify weaknesses in authentication, cryptographic controls, and mobile architectures.
• We develop proof‑of‑concept exploits and custom tooling.
• We produce high‑quality reports with practical remediation guidance.
• We work closely with software engineers and product teams to validate fixes.
• We research emerging mobile attack techniques and adversarial methods.
• We support improvements to security monitoring and detection capabilities.
• We mentor development teams on secure mobile development practices.

• API
• Android
• Support
• Mobile
• OAuth
• Security
• iOS

We are an innovative UK technology company operating at the forefront of digital identity and biometric security. As our security function continues to grow, we are looking to appoint an experienced Offensive Security Engineer with a strong focus on mobile application security. This is a hybrid UK‑based role offering a salary of £65-75k DOE. You will join a team focused on simulating real‑world attack scenarios, identifying vulnerabilities before they can be exploited, and working closely with engineering teams to strengthen our mobile security posture.

We offer the opportunity to work on sophisticated red team and mobile security assessments, explore emerging threats, and contribute to secure development across our products.