Mobile Security Engineer (Appsec) - 12-Month Contract - Inside IR35 - Hybrid (London Or Bristol)

Hamilton Barnes; Greater London; Hybrid; GBP 99,000 - 121,000; Full time

Job summary

Hamilton Barnes is sourcing a Mobile Security Engineer (AppSec) for a 12-month hybrid contract in the UK, based in London or Bristol with 3 days on-site. The role focuses on the mobile channel security, delivering a framework, consulting, and penetration testing services for a major retail and banking organisation.

The ideal candidate has 6+ years in mobile security, with Android/iOS knowledge, threat modelling expertise, and hands-on pen-testing tooling.

Qualifications

• 6+ years' experience in mobile platform security.
• In-depth knowledge of mobile app security standards (Android/iOS).
• Threat modelling and mitigation techniques.
• Hands-on penetration testing tooling, scripting, and procedures.
• Experience using mobile security tools.
• Understanding of authentication, authorisation, encryption, and cryptography patterns desirable.
• Familiarity with mobile development, DevSecOps tooling, and testing/automation frameworks desirable.
• Proactive research mindset on new security technologies.

Responsibilities

• Design and deliver a security framework for the mobile platform and associated services (penetration testing, research, consultancy).
• Conduct regular hands-on reviews of mobile application security posture.
• Apply threat modelling and mitigation techniques across the mobile channel.
• Develop and maintain pen-testing security tools, scripts, policies, and procedures.
• Research emerging technologies and threats in the security landscape.

Skills

Mobile security

Penetration testing

Threat modelling

Scripting

Security tools

Android security

iOS security

DevSecOps tooling

Cryptography patterns

Research mindset

Tools

PenTesting tooling

Mobile security tools

Job description

Mobile Security Engineer (AppSec) - 12-Month Contract - Inside IR35 - Hybrid (London or Bristol, 3 days onsite)

We are seeking Mobile Application Security Engineers to join a leading UK retail and commercial banking organisation on a 12-month hybrid contract based in London or Bristol (3 days on-site). The team is accountable for security within the mobile channel, providing a suite of mobile security components and associated services (penetration testing, obfuscation, consultancy). The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape. You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world-class security framework.

Key Responsibilities:

• Design and deliver a security framework for the mobile platform and associated services (penetration testing, research, consultancy)


• Conduct regular hands-on reviews of mobile application security posture


• Apply threat modelling and mitigation techniques across the mobile channel


• Develop and maintain pen-testing security tools, scripts, policies, and procedures


• Research emerging technologies and threats in the security landscape

What You Will Ideally Bring:

• 6+ years' experience in mobile platform security


• In-depth knowledge of mobile app security standards (Android/iOS)


• Threat modelling and mitigation techniques


• Hands-on penetration testing tooling, Scripting, and procedures


• Experience using mobile security tools


• Understanding of authentication, authorisation, encryption, and cryptography patterns desirable


• Familiarity with mobile development, DevSecOps tooling, and testing/automation frameworks desirable


• Proactive research mindset on new security technologies

Contract Details

• Duration: 12 months


• Day Rate: £450


• Determination: Inside IR35


• Location: Hybrid, 3 days per week onsite, London/Bristol


• Start Date: ASAP

Mobile Security Engineer (AppSec) - 12-Month Contract - Inside IR35 - Hybrid (London or Bristol, 3 days onsite)