Mobile application security drives this client-facing consulting role, assessing iOS and Android apps through penetration testing and hands-on analysis. You will engage directly with engineering teams.

As a Security Consultant, you will test mobile applications, APIs, back-end services, and identity systems. The work covers reverse engineering, runtime instrumentation, OWASP MASVS and MASTG, secure storage, cryptography, authentication, and session handling. You will translate technical findings into practical remediation guidance.

Key Responsibilities:

- Perform iOS and Android penetration tests and security assessments
- Reverse engineer apps using static and energetic analysis
- Review authentication, cryptography, storage, and third-party SDKs




- Write reproducible reports with risk ratings and remediation guidance
- Present findings and support client retesting

Requirements:

- Four-plus years in offensive or application security
- At least one year focused on mobile application testing
- Experience assessing native and cross-platform mobile frameworks
- Fluency with Frida, Objection, Burp Suite, and MobSF
- Working knowledge of OWASP MASVS and MASTG

Apply mobile testing expertise, clear reporting, and client communication to security assessments across iOS, Android, APIs, and back-ends.

📌 Mobile Application Security Consultant (Toronto)
🏢 Elastify
📍 Toronto