Mobile Application Security Consultant

1 year Contract

Our client is looking for an experienced Mobile Application Security Consultant to help design, build and enhance the security framework protecting enterprise mobile applications within a major financial services environment. This is a hands‑on security role focused specifically on Android and iOS application security, combining mobile penetration testing, threat modelling, security tooling, vulnerability assessment and security consultancy. You’ll work closely with mobile engineering teams to build a scalable and proactive approach to mobile security, enabling applications to be developed and operated securely within an evolving threat landscape.

Key Responsibilities

• Assess and continuously improve the security posture of Android and iOS mobile applications.
• Conduct hands‑on mobile application penetration testing and security assessments.
• Perform mobile threat modelling, identifying attack vectors, vulnerabilities and appropriate mitigations.
• Design and help deliver a comprehensive mobile application security framework.
• Develop and maintain mobile penetration‑testing tools, scripts and automation.
• Define mobile application security policies, standards, procedures and engineering guidance.
• Identify and validate vulnerabilities across mobile applications and associated services/APIs.
• Provide hands‑on Application Security consultancy to mobile engineering teams.
• Assess security controls including authentication, authorisation, encryption and cryptography.
• Support secure mobile development through DevSecOps, automated security testing and CI/CD integration.
• Research emerging mobile attack techniques, vulnerabilities and security technologies.
• Work with engineering teams to remediate identified vulnerabilities and improve secure development practices.
• 6+ years' security experience, with strong Mobile/Application Security expertise.
• Strong hands‑on Mobile Application Security experience.
• Deep security knowledge across Android and iOS.
• Strong threat modelling and threat mitigation experience.
• Experience assessing and reviewing mobile application security posture.
• Experience developing or maintaining penetration testing tools and scripts.
• Strong understanding of mobile application vulnerabilities and attack techniques.
• Knowledge of mobile application security standards and best practices.
• Ability to provide practical security guidance to developers and engineering teams.
• Familiarity with OWASP MASVS / Mobile Application Security standards.
• Experience with mobile security and penetration‑testing tools such as Burp Suite, MobSF, Frida and Objection.
• Mobile development knowledge across Android and/or iOS.
• DevSecOps and CI/CD security experience.
• Security testing and automation frameworks.
• Strong understanding of authentication, authorisation, encryption and cryptography.
• Experience securing APIs and backend services supporting mobile applications.
• Security research and emerging-threat analysis.

#J-18808-Ljbffr