Turn mobile security findings into actionable fixes for client engineering teams through assessments of iOS, Android, APIs, and back-end services. Consulting is hands-on.

The Security Consultant performs end-to-end penetration tests, from scoping through reporting, readouts, and retesting support. You will evaluate secure storage, cryptography, authentication, session handling, deep links, and mobile identity interactions. Professional certifications are strongly preferred, particularly GIAC Mobile Device Security Analyst, while robust portfolios are also encouraged.

Key Responsibilities:

- Assess mobile applications against OWASP MASVS and MASTG
- Review mobile security controls and connected API behavior
- Produce clear reports with reproducible steps and risk ratings




- Provide practical remediation guidance to engineering teams
- Contribute to tooling, methodology, and consulting knowledge sharing

Requirements:

- Four-plus years in offensive or application security
- At least one year testing mobile applications
- Deep experience with native and cross-platform mobile apps
- Fluency with mobile debugging and instrumentation tools
- Ability to manage client engagement timelines independently

Use mobile application testing, security reporting, and remediation expertise to improve client systems across connected mobile environments.

📌 Mobile Security Assessment Consultant (Canada)
🏢 Important Company of the Sector
📍 Canada