Mobile Application Security Consultant in London

1 year Contract

Our client is looking for an experienced Mobile Application Security Consultant to help design, build and enhance the security framework protecting enterprise mobile applications within a major financial services environment. This is a hands‑on security role focused specifically on Android and iOS application security , combining mobile penetration testing, threat modelling, security tooling, vulnerability assessment and security consultancy. You’ll work closely with mobile engineering teams to build a scalable and proactive approach to mobile security, enabling applications to be developed and operated securely within an evolving threat landscape.

Key Responsibilities

• Assess and continuously improve the security posture of Android and iOS mobile applications .
• Conduct hands‑on mobile application penetration testing and security assessments .
• Perform mobile threat modelling , identifying attack vectors, vulnerabilities and appropriate mitigations.
• Design and help deliver a comprehensive mobile application security framework .
• Develop and maintain mobile penetration‑testing tools, scripts and automation .
• Define mobile application security policies, standards, procedures and engineering guidance.
• Identify and validate vulnerabilities across mobile applications and associated services/APIs.
• Provide hands‑on Application Security consultancy to mobile engineering teams.
• Assess security controls including authentication, authorisation, encryption and cryptography .
• Support secure mobile development through DevSecOps, automated security testing and CI/CD integration .
• Research emerging mobile attack techniques, vulnerabilities and security technologies.
• Work with engineering teams to remediate identified vulnerabilities and improve secure development practices.
• 6+ years' security experience , with strong Mobile/Application Security expertise.
• Strong hands‑on Mobile Application Security experience.
• Deep security knowledge across Android and iOS .
• Strong threat modelling and threat mitigation experience.
• Experience assessing and reviewing mobile application security posture.
• Experience developing or maintaining penetration testing tools and scripts .
• Strong understanding of mobile application vulnerabilities and attack techniques.
• Knowledge of mobile application security standards and best practices.
• Ability to provide practical security guidance to developers and engineering teams.
• Familiarity with OWASP MASVS / Mobile Application Security standards.
• Experience with mobile security and penetration‑testing tools such as Burp Suite, MobSF, Frida and Objection .
• Mobile development knowledge across Android and/or iOS.
• DevSecOps and CI/CD security experience.
• Security testing and automation frameworks.
• Strong understanding of authentication, authorisation, encryption and cryptography .
• Experience securing APIs and backend services supporting mobile applications.
• Security research and emerging-threat analysis.

#J-18808-Ljbffr