Assess iOS and Android applications as a client-facing consultant specializing in penetration testing, reverse engineering, and mobile security assessments. The work spans complete engagements.

This Security Consultant scopes, tests, reports, and presents findings for mobile applications and their connected APIs and back-end services. You will use Frida, Objection, Burp Suite, MobSF, jadx, apktool, Hopper, or Ghidra. Your assessments apply OWASP MASVS and MASTG across authentication, deep links, inter-process communication, and third-party SDK usage.

Key Responsibilities:

- Scope mobile security engagements and support pre-sales conversations
- Conduct static analysis, dynamic analysis, and runtime hooking
- Intercept traffic and bypass certificate pinning protections
- Assess APIs, back-end services,



and identity systems
- Explain findings to engineering, product, and executive stakeholders

Requirements:

- Four-plus years of offensive or application security experience
- One-plus year of focused mobile application testing
- Demonstrable iOS and Android assessment experience
- Knowledge of Swift, Objective-C, Kotlin, Java, or frameworks
- Solid technical reporting and client communication abilities

Bring end-to-end penetration testing, mobile reverse engineering, and stakeholder communication skills to iOS and Android consulting engagements.

#J-18808-Ljbffr

📌 iOS Android Penetration Testing Consultant (Toronto)
🏢 Elastify
📍 Toronto