Mobile App Security Engineer — Hybrid (Android/iOS)

iBSC; Greater London; Hybrid; GBP 83,000 - 138,000; Full time

Job summary

iBSC in London is seeking an experienced Mobile Application Security Engineer to join a major mobile security programme, focusing on Android and iOS applications. The role is hybrid with 2 days onsite and a 6-month rolling contract, Inside IR35.

You will perform threat modelling, penetration testing, and tool development, collaborating with mobile engineering teams to implement security best practices and stay ahead of emerging threats.

Qualifications

• Strong Mobile Application Security experience
• Android & iOS security expertise
• Mobile penetration testing
• Threat modelling & mitigation techniques
• Hands-on mobile application security assessments
• Experience developing and maintaining penetration-testing tools and scripts
• In-depth knowledge of mobile application security standards
• Understanding of authentication, authorisation, encryption and cryptography
• Exposure to DevSecOps, security automation and testing frameworks
• Strong experience with mobile security tools
• Experience researching emerging mobile threats and technologies

Responsibilities

• Assess and improve the security posture of mobile applications
• Conduct threat modelling, vulnerability assessments and security reviews
• Develop and maintain mobile security and penetration-testing tools
• Support security across Android and iOS platforms
• Work closely with mobile engineering teams to implement security best practices
• Research emerging mobile threats, vulnerabilities and mitigation techniques
• Contribute to the design and delivery of a robust mobile security framework

Skills

Mobile security

Android security

iOS security

Mobile penetration testing

Threat modelling

Security tooling

Cryptography

DevSecOps

Security frameworks

Security tooling

Threat research

Job description

iBSC in London is seeking an experienced Mobile Application Security Engineer to join a major mobile security programme, focusing on Android and iOS applications. The role is hybrid with 2 days onsite and a 6-month rolling contract, Inside IR35.

You will perform threat modelling, penetration testing, and tool development, collaborating with mobile engineering teams to implement security best practices and stay ahead of emerging threats.