Mobile Security Engineer (AppSec) - 12-Month Contract - Inside IR35 - Hybrid (London or Bristol)

Mobile Security Engineer (AppSec) - 12-Month Contract - Inside IR35 - Hybrid (London or Bristol, 3 days onsite)

We are seeking Mobile Application Security Engineers to join a leading UK retail and commercial banking organisation on a 12-month hybrid contract based in London or Bristol (3 days on-site). The team is accountable for security within the mobile channel, providing a suite of mobile security components and associated services (penetration testing, obfuscation, consultancy). The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape. You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world-class security framework.

Key Responsibilities:

• Design and deliver a security framework for the mobile platform and associated services (penetration testing, research, consultancy)
• Conduct regular hands-on reviews of mobile application security posture
• Apply threat modelling and mitigation techniques across the mobile channel
• Develop and maintain pen-testing security tools, scripts, policies, and procedures
• Research emerging technologies and threats in the security landscape

What You Will Ideally Bring:

• 6+ years' experience in mobile platform security
• In-depth knowledge of mobile app security standards (Android/iOS)
• Threat modelling and mitigation techniques
• Hands-on penetration testing tooling, Scripting, and procedures
• Experience using mobile security tools
• Understanding of authentication, authorisation, encryption, and cryptography patterns desirable
• Familiarity with mobile development, DevSecOps tooling, and testing/automation frameworks desirable
• Proactive research mindset on new security technologies

Contract Details

• Duration: 12 months
• Day Rate: £450
• Determination: Inside IR35
• Location: Hybrid, 3 days per week onsite, London/Bristol
• Start Date: ASAP

Mobile Security Engineer (AppSec) - 12-Month Contract - Inside IR35 - Hybrid (London or Bristol, 3 days onsite)