Software Engineer - Mobile Security in Cardiff

Starling is the UK's first and leading digital bank on a mission to fix banking! Our vision is fast technology, fair service, and honest values. We are about giving customers a new way to spend, save and manage their money while taking better care of the planet. Our journey started in 2014, and since then we have surpassed 3.5 million accounts with 350,000 business customers. We are a fully licensed UK bank but at the heart, we are a tech-first company, enabling our platform to deliver brilliant products.

We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be. Innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture; you will find support in your team and from across the business. The way to thrive and shine within Starling is to be a self-driven individual and take full ownership of everything around you.

Our purpose is underpinned by five Starling values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.

Hybrid Working
We have a Hybrid approach to working here at Starling - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. In Technology, we're asking that you attend the office a minimum of 1 day per week.

About the Role
We are seeking a highly motivated and experienced Mobile Security Engineer to join our Cyber Security team. As a Mobile Security Engineer, your primary responsibility will be to design, build, and maintain security for our Android and iOS mobile applications, ensuring our customers are protected while using our services. You will achieve this by collaborating with cross-functional engineering teams to implement robust security controls and enhancements.

Responsibilities

• Design, implement, and maintain security controls and mechanisms to secure our Android and iOS applications, and the data held on customer devices.
• Partner with internal engineering teams to identify and remediate security vulnerabilities across mobile platforms.
• Provide technical consultancy and guidance to engineering and operations functions to ensure that all technical aspects of our mobile applications are built and operated securely.
• Stay at the forefront of the industry by monitoring emerging threats and security trends for both Android and iOS.
• Create automated solutions to streamline security testing and vulnerability management within the mobile development lifecycle.
• Maintain strict adherence to global security standards and regulatory requirements.

Requirements

• Strong Mobile Security technical knowledge, including deep understanding of both Android and iOS security (e.g., native APIs, file permissions, application sandboxing, and hardware security controls).
• Proficiency with relevant mobile development languages (e.g., Swift for iOS, Kotlin/Java for Android).
• Practical and theoretical knowledge of public cloud (IaaS) technologies.
• Strong reverse engineering capabilities for mobile applications.
• Practical working knowledge of cryptography used for protecting data and network communications.
• Awareness of mobile threat landscape such as malware and remote access.
• Experience with developing security integrations by interacting with APIs.
• Ability and willingness to learn new technologies and adapt to evolving security landscapes.
• Strong written and verbal communication skills to effectively collaborate with cross-functional teams and stakeholders.
• Experience fulfilling a client-facing security consulting role is highly desirable.

Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious.

In general, you can expect the below, following a chat with one of our Talent Team:

• First stage with a Mobile Engineer Technical Test
• Second stage with additional members Security Mobile Engineers
• Final stage with Security Engineering Lead and Information Security Director

Benefits

• 25 days holiday (plus take your public holiday allowance whenever works best for you)
• An extra day's holiday for your birthday
• Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
• 16 hours paid volunteering time a year
• Salary sacrifice, company enhanced pension scheme
• Life insurance at 4x your salary & group income protection
• Private Medical Insurance with VitalityHealth including mental health support and cancer care
• Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton
• Generous family-friendly policies
• Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
• Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing

About Us
You may be put off applying for a role because you don't tick every box. Forget that! While we can't accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren't sure if you're 100% there yet, get in touch anyway. We're on a mission to radically reshape banking - and that starts with our brilliant team. Starling Bank is an equal opportunity employer, and we're proud of our ongoing efforts to foster diversity & inclusion in the workplace.