Mobile Security Engineer (Appsec)

Mobile Security Engineer (AppSec) - 12-Month Contract - Inside IR35 - Hybrid (London or Bristol, 3 days onsite)

We are seeking Mobile Application Security Engineers to join a leading UK retail and commercial banking organisation on a 12-month hybrid contract based in London or Bristol (3 days on-site). The team is accountable for security within the mobile channel, providing a suite of mobile security components and associated services (penetration testing, obfuscation, consultancy). The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape. You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world-class security framework.

Key Responsibilities:

Design and deliver a security framework for the mobile platform and associated services (penetration testing, research, consultancy)
Conduct regular hands-on reviews of mobile application security posture
Apply threat modelling and mitigation techniques across the mobile channel
Develop and maintain pen-testing security tools, scripts, policies, and procedures
Research emerging technologies and threats in the security landscape

What You Will Ideally Bring:

6+ years' experience in mobile platform security
In-depth knowledge of mobile app security standards (Android/iOS)
Threat modelling and mitigation techniques
Hands-on penetration testing tooling, Scripting, and procedures
Experience using mobile security tools
Understanding of authentication, authorisation, encryption, and cryptography patterns desirable
Familiarity with mobile development, DevSecOps tooling, and testing/automation frameworks desirable
Proactive research mindset on new security technologies

Contract Details

Duration: 12 months
Day Rate: £450
Determination: Inside IR35
Location: Hybrid, 3 days per week onsite, London/Bristol
Start Date: ASAP