Mobile Security Engineer; AppSec IR35

We are seeking Mobile Application Security Engineers to join a leading UK retail and commercial banking organisation on a 12–month hybrid contract based in London or Bristol (3 days on–site). The team is accountable for security within the mobile channel, providing a suite of mobile security components and associated services (penetration testing, obfuscation, consultancy). The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape.

You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world–class security framework.

• Design and deliver a security framework for the mobile platform and associated services (penetration testing, research, consultancy)
• Conduct regular hands–on reviews of mobile application security posture
• Apply threat modelling and mitigation techniques across the mobile channel
• Develop and maintain pen–testing security tools, scripts, policies, and procedures
• Research emerging technologies and threats in the security landscape

• 6+ years' experience in mobile platform security
• In–depth knowledge of mobile app security standards (Android/iOS)
• Threat modelling and mitigation techniques
• Hands–on penetration testing tooling, Scripting, and procedures
• Experience using mobile security tools
• Understanding of authentication, authorisation, encryption, and cryptography patterns desirable
• Familiarity with mobile development, Dev Sec Ops  tooling, and testing/automation frameworks desirable
• Proactive research mindset on new security technologies

• Duration: 12 months
• Day Rate: GBP
  450
• Determination:
  Inside IR35
• Location:
  
  Hybrid, 3 days per week onsite, London/Bristol
• Start Date:
  
  ASAP