Mobile application security drives this client-facing consulting role, assessing i OS and Android apps through penetration testing and hands-on analysis. You will engage directly with engineering teams.
As a Security Consultant, you will test mobile applications, APIs, back-end services, and identity systems. The work covers reverse engineering, runtime instrumentation, OWASP MASVS and MASTG, secure storage, cryptography, authentication, and session handling. You will translate technical findings into practical remediation guidance.
Key Responsibilities: Perform i OS and Android penetration tests and security assessments
Reverse engineer apps using static and dynamic analysis
Review authentication, cryptography, storage, and third-party SDKs




Write reproducible reports with risk ratings and remediation guidance
Present findings and support client retesting
Requirements: Four-plus years in offensive or application security
At least one year focused on mobile application testing
Experience assessing native and cross-platform mobile frameworks
Fluency with Frida, Objection, Burp Suite, and Mob SF
Working knowledge of OWASP MASVS and MASTG
Apply mobile testing expertise, transparent reporting, and client communication to security assessments across i OS, Android, APIs, and back-ends.

📌 Mobile Application Security Consultant (Toronto)
🏢 Elastify
📍 Toronto