Assess iOS and Android applications as a client-facing consultant specializing in penetration testing, reverse engineering, and mobile security assessments. The work spans complete engagements.

This Security Consultant scopes, tests, reports, and presents findings for mobile applications and their connected APIs and back-end services. You will use Frida, Objection, Burp Suite, MobSF, jadx, apktool, Hopper, or Ghidra. Your assessments apply OWASP MASVS and MASTG across authentication, deep links, inter-process communication, and third-party SDK usage.

Key Responsibilities

Scope mobile security engagements and support pre-sales conversations

Conduct static analysis, energetic analysis, and runtime hooking

Intercept traffic and bypass certificate pinning protections

Assess APIs, back-end services,



and identity systems

Explain findings to engineering, product, and executive stakeholders

Requirements

Four-plus years of offensive or application security experience

One-plus year of focused mobile application testing

Demonstrable iOS and Android assessment experience

Knowledge of Swift, Objective-C, Kotlin, Java, or frameworks

Strong technical reporting and client communication abilities

Bring end-to-end penetration testing, mobile reverse engineering, and stakeholder communication skills to iOS and Android consulting engagements.

📌 iOS Android Penetration Testing Consultant (Winnipeg)
🏢 Elastify
📍 Winnipeg