Mobile Security Engineer (Hybrid, Fixed-term)

About the role

We are looking for a Mobile Security Engineer to join HCLTech’s security team on a fixed‑term basis. Working hybrid in London (with two days on‑site), you will help protect our mobile applications by applying threat‑modelling, penetration testing and security‑by‑design practices.

Key responsibilities

• Conduct regular reviews of the mobile application security posture across Android and iOS platforms.
• Perform threat modelling and define mitigation techniques for identified risks.
• Develop and maintain penetration‑testing tools, scripts, policies and procedures.
• Collaborate with development and DevSecOps teams to integrate security controls into the CI/CD pipeline.
• Stay up‑to‑date with emerging mobile security technologies and industry standards.

Required profile

• Proven experience in mobile platform security, including threat modelling and mitigation.
• Hands‑on experience reviewing and improving mobile app security posture.
• Ability to work in a hybrid environment and deliver results on a fixed‑term contract.

Required skills

• In‑depth knowledge of Android and iOS security standards.
• Experience with mobile security testing tools and penetration‑testing frameworks.
• Understanding of authentication, authorization, encryption and cryptography patterns.
• Familiarity with DevSecOps tooling and automated testing frameworks.
• Ability to research and evaluate new security technologies.

What we offer

• Supportive, diverse global team with a strong culture.
• Competitive compensation and benefits including vacation, term‑life and business‑travel insurance.
• Opportunities for upskilling, CSR involvement and participation in diversity initiatives.