Mobile Application Security Consultant

Queen Square Recruitment Ltd; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Our client in Greater London is seeking an experienced Mobile Application Security Consultant to design, build and enhance the security framework protecting enterprise mobile apps. This hands-on role focuses on Android and iOS security, blending mobile penetration testing, threat modelling, tooling, vulnerability assessment and security consultancy.

You will collaborate with mobile engineering teams to enable secure development and CI/CD integration, perform mobile threat modelling, identify

Qualifications

• 6+ years of security experience in mobile/app security.
• Deep knowledge of Android and iOS security concepts and vulnerabilities.
• Hands-on experience with mobile penetration testing and security assessments.
• Familiarity with OWASP MASVS and mobile security standards.
• Experience with security tooling such as Burp Suite, MobSF, Frida and Objection.
• Experience with DevSecOps and CI/CD security practices.
• Ability to provide practical security guidance to developers.

Responsibilities

• Assess and improve the security posture of Android and iOS mobile applications.
• Conduct hands-on mobile app penetration testing and security assessments.
• Perform mobile threat modelling and identify mitigations.
• Design and help deliver a comprehensive mobile app security framework.
• Develop and maintain mobile penetration-testing tools and automation.
• Define security policies, standards, and guidance for mobile development.
• Support secure mobile development through DevSecOps and CI/CD integration.
• Remediate vulnerabilities with engineering teams.
• Research emerging mobile attack techniques and technologies.
• Work with engineering teams to improve secure development practices.

Skills

Mobile security

Android

iOS

Penetration testing

Threat modelling

DevSecOps

CI/CD

Burp Suite

MobSF

Frida

Objection

Tools

Burp Suite

MobSF

Frida

Objection

Job description

1 year Contract

Our client is looking for an experienced Mobile Application Security Consultant to help design, build and enhance the security framework protecting enterprise mobile applications within a major financial services environment. This is a hands‑on security role focused specifically on Android and iOS application security, combining mobile penetration testing, threat modelling, security tooling, vulnerability assessment and security consultancy. You’ll work closely with mobile engineering teams to build a scalable and proactive approach to mobile security, enabling applications to be developed and operated securely within an evolving threat landscape.

Key Responsibilities

• Assess and continuously improve the security posture of Android and iOS mobile applications.
• Conduct hands‑on mobile application penetration testing and security assessments.
• Perform mobile threat modelling, identifying attack vectors, vulnerabilities and appropriate mitigations.
• Design and help deliver a comprehensive mobile application security framework.
• Develop and maintain mobile penetration‑testing tools, scripts and automation.
• Define mobile application security policies, standards, procedures and engineering guidance.
• Identify and validate vulnerabilities across mobile applications and associated services/APIs.
• Provide hands‑on Application Security consultancy to mobile engineering teams.
• Assess security controls including authentication, authorisation, encryption and cryptography.
• Support secure mobile development through DevSecOps, automated security testing and CI/CD integration.
• Research emerging mobile attack techniques, vulnerabilities and security technologies.
• Work with engineering teams to remediate identified vulnerabilities and improve secure development practices.
• 6+ years' security experience, with strong Mobile/Application Security expertise.
• Strong hands‑on Mobile Application Security experience.
• Deep security knowledge across Android and iOS.
• Strong threat modelling and threat mitigation experience.
• Experience assessing and reviewing mobile application security posture.
• Experience developing or maintaining penetration testing tools and scripts.
• Strong understanding of mobile application vulnerabilities and attack techniques.
• Knowledge of mobile application security standards and best practices.
• Ability to provide practical security guidance to developers and engineering teams.
• Familiarity with OWASP MASVS / Mobile Application Security standards.
• Experience with mobile security and penetration‑testing tools such as Burp Suite, MobSF, Frida and Objection.
• Mobile development knowledge across Android and/or iOS.
• DevSecOps and CI/CD security experience.
• Security testing and automation frameworks.
• Strong understanding of authentication, authorisation, encryption and cryptography.
• Experience securing APIs and backend services supporting mobile applications.
• Security research and emerging-threat analysis.