Mobile application security drives this client-facing consulting role, assessing iOS and Android apps through penetration testing and hands-on analysis. You will engage directly with engineering teams.

As a Security Consultant, you will test mobile applications, APIs, back-end services, and identity systems. The work covers reverse engineering, runtime instrumentation, OWASP MASVS and MASTG, secure storage, cryptography, authentication, and session handling. You will translate technical findings into practical remediation guidance.

Key Responsibilities:

Perform iOS and Android penetration tests and security assessments

Reverse engineer apps using static and dynamic analysis

Review authentication, cryptography, storage, and third-party SDKs





Write reproducible reports with risk ratings and remediation guidance

Present findings and support client retesting

Requirements:

Four-plus years in offensive or application security

At least one year focused on mobile application testing

Experience assessing native and cross-platform mobile frameworks

Fluency with Frida, Objection, Burp Suite, and MobSF

Working knowledge of OWASP MASVS and MASTG

Apply mobile testing expertise, explicit reporting, and client communication to security assessments across iOS, Android, APIs, and back-ends.

#J-18808-Ljbffr

📌 Security Analysis Advisor (Toronto)
🏢 Elastify
📍 Toronto