Mobile Security Engineer (AppSec) - 12-Month Contract - Inside IR35 -

Hamilton Barnes; City Of London; Hybride; GBP 16 605 000 - 22 140 000; Plein temps

Résumé du poste

Hamilton Barnes is recruiting a Mobile Application Security Engineer for a 12-month hybrid contract based in London or Bristol (3 days on-site). The role sits within a UK retail and commercial banking organisation and focuses on security within the mobile channel, delivering a world-class security framework and related services.

You will design and deliver the mobile security framework, conduct hands-on reviews, apply threat modelling, develop pen-testing tools, and research new threats in a

Qualifications

• 6+ years in mobile platform security.
• Knowledge of Android and iOS security standards.
• Experience with threat modelling and mitigation.
• Hands-on pen-testing tooling and scripting.
• Familiarity with authentication, encryption, and cryptography patterns.
• Experience with DevSecOps tooling and testing/automation.

Responsabilités

• Design and deliver a security framework for the mobile platform and services (penetration testing, research, consultancy).
• Conduct regular hands-on reviews of mobile application security posture.
• Apply threat modelling and mitigation techniques across the mobile channel.
• Develop and maintain pen-testing security tools, scripts, policies, and procedures.
• Research emerging technologies and threats in the security landscape.

Connaissances

Mobile security

Android security

iOS security

Threat modelling

Penetration testing tooling

DevSecOps tooling

Cryptography concepts

Security research

Authentication & authorization

Security tooling familiarity

Outils

Mobile security tools

Description du poste

Mobile Security Engineer (AppSec) – 12–Month Contract – Inside IR35 – Hybrid (London or Bristol, 3 days onsite)

We are seeking Mobile Application Security Engineers to join a leading UK retail and commercial banking organisation on a 12–month hybrid contract based in London or Bristol (3 days on–site). The team is accountable for security within the mobile channel, providing a suite of mobile security components and associated services (penetration testing, obfuscation, consultancy). The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape. You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world–class security framework.

Key Responsibilities

• Design and deliver a security framework for the mobile platform and associated services (penetration testing, research, consultancy)
• Conduct regular hands–on reviews of mobile application security posture
• Apply threat modelling and mitigation techniques across the mobile channel
• Develop and maintain pen–testing security tools, scripts, policies, and procedures
• Research emerging technologies and threats in the security landscape

What You Will Ideally Bring

• 6+ years' experience in mobile platform security
• In–depth knowledge of mobile app security standards (Android/iOS)
• Threat modelling and mitigation techniques
• Hands–on penetration testing tooling, Scripting, and procedures
• Experience using mobile security tools
• Understanding of authentication, authorisation, encryption, and cryptography patterns desirable
• Familiarity with mobile development, DevSecOps tooling, and testing/automation frameworks desirable
• Proactive research mindset on new security technologies

Contract Details

• Duration: 12 months
• Day Rate: GBP450
• Determination: Inside IR35
• Location: Hybrid, 3 days per week onsite, London/Bristol
• Start Date: ASAP