AdTech Privacy Technical Analyst

AdTech Privacy Technical Analyst (AdTech & MarTech, Privacy & Consent)

Contract | Outside IR35 | London & Remote Hybrid

We're looking for a hands-on AdTech Privacy Technical Analyst with strong QA experience to test and assure consent compliance across a portfolio of consumer mobile apps, with a wider device estate to follow.

Focus will be on intercepting network calls of apps, connected devices and Internet of Things and auditing HTTP Archive (HAR) logs, using Proxyman, Charles Proxy and Fiddler as the main tools. You'll confirm that cookies and equivalent marketing and tracking technologies respect customer consent choices, and you'll help app teams test for themselves.

The role has two parts: defining a repeatable self-testing process for delivery teams, and providing second line assurance by independently verifying their results where technically possible.

Key Responsibilities

Consent Testing & Traffic Auditing

• Test cookies and equivalent tracking technologies in iOS and Android apps to confirm consent preferences are honoured before, during and after user interaction, including withdrawal of consent.
• Intercept and inspect network traffic using Proxyman, Charles Proxy and Fiddler (with Burp Suite as required), working from published app store builds and from test builds.
• Capture and audit HAR logs to identify tracking calls, identifiers, payloads and third-party endpoints.
• Use Android Logcat and Xcode Console to gather supporting evidence where HAR files are incomplete or certificate pinning limits visibility.
• Inspect SDKs and app packages using tools such as MobSF and APK Analyzer to identify undeclared or non-compliant tracking.

Self-Testing Framework & Assurance

• Define and document a repeatable self-testing process that app teams can follow, including guidance on producing HAR evidence from their own testing.
• Review HAR logs supplied by teams, including analysis within ObservePoint, and challenge gaps or inconsistencies.
• Run independent second line verification of team results, from published app store versions where possible.
• Agree test builds with engineering where HTTPS inspection needs certificate pinning disabled or the Proxy trusted.
• Extend the approach to connected devices and IoT products as the device scope grows.

Analysis & Reporting

• Document findings clearly, with evidence, risk rating and recommended remediation.
• Maintain tracker inventories, data flow maps and vendor and SDK registers.
• Present results to engineering, Product, Legal and privacy stakeholders in plain language.

Collaboration & Delivery

• Work with engineering squads, delivery managers and architects to turn findings into technical fixes.
• Contribute test criteria and acceptance checks for consent and tagging changes.
• Re-test releases, SDK updates and vendor changes to catch regressions.

Essential Experience

• Proven technical analyst, QA or audit experience within AdTech/MarTech environments.
• Hands-on network interception and analysis using Proxyman, Charles Proxy and Fiddler (Burp Suite and browser dev tools a plus).
• Confident capturing, reading and auditing HAR files and tracking payloads.
• Mobile app testing on iOS and Android, including Logcat and Xcode Console.
• Experience dealing with certificate pinning and HTTPS inspection constraints.
• Working knowledge of CMPs, TCF, cookies and mobile identifiers (IDFA/GAID).
• Sound understanding of GDPR, PECR, ePrivacy and ICO guidance as they apply to digital marketing.
• Strong documentation and stakeholder communication skills, with the ability to coach teams.

Desirable

• Experience with ObservePoint or similar tag and privacy auditing platforms.
• SDK analysis using MobSF and APK Analyzer.
• Testing of connected devices, smart home, wearable or IoT products.
• Familiarity with tagging stacks (GTM, Tealium, Server Side tagging) and CDPs.
• Scripting for traffic capture and analysis (eg Python, JavaScript).
• Privacy certification (eg CIPP/E, CIPT).

Contract Details

• IR35: Outside
• Location: London & remote hybrid ( 2 days onsite)
• Industry: Consumer electronics/digital/marketing technology