Mobile Application Security Engineer
Location: Bristol / Hybrid (onsite once a month)
We have an exciting opportunity for a Mobile Application Security Engineer to join a leading organisation on a contract basis. You’ll play a key role in strengthening the security of large-scale mobile applications, working across both iOS and Android platforms.
Partnering with engineering and cyber security teams, you’ll embed and enhance mobile security throughout the development lifecycle shaping tooling strategy, driving automation and promoting a “Secure by Design” culture.
Key Responsibilities
* Design and implement automated mobile security testing and vulnerability scanning within the mobile SDLC.
* Define and deliver the mobile app security tooling and technology strategy.
* Run proof of concepts for new tools and integrate them into CI/CD pipelines.
* Roll out, optimise and measure the effectiveness of mobile security tooling.
* Triage vulnerabilities, identify false positives and provide remediation and risk guidance.
* Build strong partnerships with engineering and security stakeholders.
* Implement and maintain a Mobile Application Security Testing platform for manual testing.
Skills & Experience
* Proven experience with mobile SAST/SCA and security testing tools (e.g. mobSF, Corellium).
* Strong grasp of vulnerability frameworks such as CVSS and EPSS.
* Development experience in at least one mobile programming language (Objective-C, Swift, Java, Kotlin).
* Familiar with CI/CD and build tools (GitLab, Harness, Jenkins).
* Excellent understanding of mobile security vulnerabilities and emerging threats.
* Strong communication skills — able to explain risks clearly to technical and non-technical audiences.
* Relevant certification (e.g. GIAC Mobile Device Security Analyst).
Seniority level
Mid-Senior level
Employment type
Contract
Job function
Consulting
#J-18808-Ljbffr