Mobile Security Specialist

About the role

FDM Group, a global business and technology consultancy, is looking for a Mobile Security Specialist to support a finance‑focused client. This is a six‑month contract based in Bristol with a hybrid working model.

Key responsibilities

• Support the design, delivery and continuous improvement of the client’s mobile security framework.
• Partner with other Mobile Security Specialists to strengthen security capabilities across the mobile platform.
• Conduct mobile application penetration testing and security assessments, identifying vulnerabilities and recommending remediation.
• Perform security reviews, threat analysis and risk assessments to enhance the mobile security posture.
• Promote application hardening techniques, secure development practices and mobile security standards.
• Develop and maintain security tooling, testing capabilities and automation for improved assurance.
• Provide security consultancy and guidance to engineering teams throughout the development lifecycle.
• Collaborate with stakeholders to drive continuous improvement of mobile security services.

Required profile

• Understanding of application security principles and common cyber‑security threats.
• Knowledge of OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Application Security Testing Guide (MASTG).
• Familiarity with mobile application architecture, secure coding principles, authentication and authorisation mechanisms, cryptography fundamentals and API security concepts.
• Basic scripting or programming experience.

Required skills

• OWASP MASVS and MASTG
• Android development: Kotlin, Java, Android SDK, Android Studio, Android Keystore
• iOS development: Swift, Objective‑C, Xcode, iOS Keychain, Secure Enclave
• Security tooling: Burp Suite, OWASP ZAP, MobSF (Mobile Security Framework)
• Vulnerability assessment and penetration testing methodologies