Mobile application security drives this client-facing consulting role, assessing iOS and Android apps through penetration testing and hands-on analysis. You will engage directly with engineering teams.
As a Security Consultant, you will test mobile applications, APIs, back-end services, and identity systems. The work covers reverse engineering, runtime instrumentation, OWASP MASVS and MASTG, secure storage, cryptography, authentication, and session handling. You will translate technical findings into practical remediation guidance.

Key Responsibilities

Perform iOS and Android penetration tests and security assessmentsReverse engineer apps using static and dynamic analysisReview authentication, cryptography, storage,



and third-party SDKsWrite reproducible reports with risk ratings and remediation guidancePresent findings and support client retestingRequirements:
Four-plus years in offensive or application securityAt least one year focused on mobile application testingExperience assessing native and cross-platform mobile frameworksFluency with Frida, Objection, Burp Suite, and MobSFWorking knowledge of OWASP MASVS and MASTGApply mobile testing expertise, explicit reporting, and client communication to security assessments across iOS, Android, APIs, and back-ends.
#J-18808-Ljbffr

📌 Mobile Application Security Consultant (Winnipeg)
🏢 Elastify
📍 Winnipeg