Mobile Application Security Engineer

Sanderson; England; Hybrid; GBP 80,000 - 100,000; Part time

Job summary

A leading technology organization is seeking a Mobile Application Security Engineer in the UK. This role involves strengthening the security of mobile applications across iOS and Android, designing automated security testing processes, and collaborating with engineering teams. Candidates should have experience with SAST tools, vulnerability frameworks, and mobile programming languages. This position offers an attractive daily rate and a hybrid work model.

Qualifications

• Proven experience with mobile SAST/SCA and security testing tools.
• Strong grasp of vulnerability frameworks like CVSS and EPSS.
• Development experience in mobile programming languages.

Responsibilities

• Design and implement automated mobile security testing.
• Define and deliver mobile app security tooling strategy.
• Run proof of concepts for new tools.

Skills

Mobile SAST/SCA tools

Vulnerability frameworks such as CVSS

Mobile programming languages (Objective–C, Swift, Java, Kotlin)

Scripting skills in Python or JavaScript

CI/CD tools (GitLab, Harness, Jenkins)

Mobile security vulnerabilities knowledge

Strong communication skills

Relevant certification (GIAC Mobile Device Security Analyst)

Job description

Mobile Application Security Engineer

Rate: GBP650 per day Inside IR35

Duration: 6 months

Location: Bristol / Hybrid (onsite once a month)

We have an exciting opportunity for a Mobile Application Security Engineer to join a leading organisation on a contract basis. You'll play a key role in strengthening the security of large–scale mobile applications, working across both iOS and Android platforms.

Partnering with engineering and cyber security teams, you'll embed and enhance mobile security throughout the development lifecycle shaping tooling strategy, driving automation and promoting a "Secure by Design" culture.

Key Responsibilities

• Design and implement automated mobile security testing and vulnerability scanning within the mobile SDLC.
• Define and deliver the mobile app security tooling and technology strategy.
• Run proof of concepts for new tools and integrate them into CI/CD pipelines.
• Roll out, optimise and measure the effectiveness of mobile security tooling.
• Triage vulnerabilities, identify false positives and provide remediation and risk guidance.
• Build strong partnerships with engineering and security stakeholders.
• Implement and maintain a Mobile Application Security Testing platform for manual testing.

Skills & Experience

• Proven experience with mobile SAST/SCA and security testing tools (e.g. mobSF, Corellium).
• Strong grasp of vulnerability frameworks such as CVSS and EPSS.
• Development experience in at least one mobile programming language (Objective–C, Swift, Java, Kotlin).
• Scripting skills in Python or JavaScript.
• Familiar with CI/CD and build tools (GitLab, Harness, Jenkins).
• Excellent understanding of mobile security vulnerabilities and emerging threats.
• Strong communication skills – able to explain risks clearly to technical and non–technical audiences.
• Relevant certification (e.g. GIAC Mobile Device Security Analyst).

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.