Mobile Security Engineer (Inside IR35)

Job Description

We’re Hiring: Mobile Security Engineer

Experience: 8+ Years

Location: Bristol / London, UK (Hybrid – Onshore)

Employment Type: Contract (Inside IR35)

Company: Derisk360

Preferred: Immediate Joiners (0–15 Days Notice Period)

Are you passionate about securing mobile applications and protecting enterprise platforms from emerging threats? Join Derisk360 as a Mobile Security Engineer and help strengthen the security posture of mobile applications through security assessments, threat modelling, and secure engineering practices.

What You'll Do:

• Conduct regular reviews of mobile application security posture using hands-on security assessment techniques.
• Perform threat modelling and recommend appropriate mitigation strategies for mobile platforms.
• Develop and maintain penetration testing tools, scripts, security policies, and procedures.
• Assess and improve the security of Android and iOS applications.
• Collaborate with development and engineering teams to embed security throughout the software development lifecycle.
• Research emerging security threats and recommend improvements to strengthen mobile application security.

What You Bring:

• Strong experience in mobile platform security, threat modelling, and mitigation techniques.
• Hands-on experience conducting mobile application security reviews.
• Experience developing and maintaining penetration testing tools, scripts, policies, and procedures.
• In-depth knowledge of mobile application security standards for Android and iOS.

Good to Have:

• Familiarity with mobile development, DevSecOps tooling, testing, and automation frameworks.
• Hands-on experience using mobile security tools.
• Good understanding of authentication, authorization, encryption, and cryptography patterns.
• Experience researching emerging technologies and trends within the security landscape.