Assess iOS and Android applications as a client-facing consultant specializing in penetration testing, reverse engineering, and mobile security assessments. The work spans complete engagements. This Security Consultant scopes, tests, reports, and presents findings for mobile applications and their connected APIs and back-end services. You will use Frida, Objection, Burp Suite, MobSF, jadx, apktool, Hopper, or Ghidra. Your assessments apply OWASP MASVS and MASTG across authentication, deep links, inter-process communication, and third-party SDK usage. Key Responsibilities:

Scope mobile security engagements and support pre-sales conversations Conduct static analysis, agile analysis, and runtime hooking Intercept traffic and bypass certificate pinning protections Assess APIs, back-end services,



and identity systems Explain findings to engineering, product, and executive stakeholders Requirements:

Four-plus years of offensive or application security experience One-plus year of focused mobile application testing Demonstrable iOS and Android assessment experience Knowledge of Swift, Objective-C, Kotlin, Java, or frameworks Strong technical reporting and client communication abilities Bring end-to-end penetration testing, mobile reverse engineering, and stakeholder communication skills to iOS and Android consulting engagements.

📌 iOS Android Penetration Testing Consultant (Toronto)
🏢 Elastify
📍 Toronto