Mobile Security Engineer (Hybrid, Fixed‑Term)

About the role

We are looking for a Mobile Security Engineer to join HCLTech’s security team on a fixed‑term basis. Working hybrid from Bristol or London, you will help protect our mobile applications by applying threat‑modelling, penetration testing and security‑by‑design practices.

Key responsibilities

• Perform regular security assessments of Android and iOS applications and report findings.
• Develop, maintain and enhance penetration‑testing tools, scripts, policies and procedures for mobile platforms.
• Conduct threat modelling and devise mitigation strategies for identified vulnerabilities.
• Collaborate with development and DevSecOps teams to integrate security controls into the mobile CI/CD pipeline.
• Stay up‑to‑date with emerging mobile security technologies and research new attack vectors.

Required profile

• Proven experience in mobile platform security, including threat modelling and mitigation.
• Hands‑on expertise reviewing mobile application security posture.
• Ability to work onsite two days a week and remotely the remaining days.

Required skills

• In‑depth knowledge of Android and iOS security standards.
• Experience with mobile security testing tools and frameworks.
• Understanding of authentication, authorization, encryption and cryptography patterns.
• Familiarity with mobile development and DevSecOps tooling.