Mobile application security drives this client-facing consulting role, assessing iOS and Android apps through penetration testing and hands-on analysis. You will engage directly with engineering teams. As a Security Consultant, you will test mobile applications, APIs, back-end services, and identity systems. The work covers reverse engineering, runtime instrumentation, OWASP MASVS and MASTG, secure storage, cryptography, authentication, and session handling. You will translate technical findings into practical remediation guidance. Key Responsibilities:
Perform iOS and Android penetration tests and security assessments Reverse engineer apps using static and dynamic analysis Review authentication, cryptography, storage, and third-party SDKs Write reproducible reports with risk ratings and remediation guidance Present findings and support client retesting Requirements:
Four-plus years in offensive or application security At least one year focused on mobile application testing Experience assessing native and cross-platform mobile frameworks Fluency with Frida, Objection, Burp Suite, and MobSF Working knowledge of OWASP MASVS and MASTG Apply mobile testing expertise, clear reporting, and client communication to security assessments across iOS, Android, APIs, and back-ends.
#J-18808-Ljbffr
Mobile Application Security Consultant in Toronto employer: Elastify
Join a fast-growing private equity firm in Toronto that values innovation and collaboration, offering a vibrant work culture where your contributions directly impact the development of cutting-edge SaaS platforms. With a focus on employee growth, you will have access to continuous learning opportunities and the chance to work alongside talented professionals in a dynamic environment that encourages creativity and excellence.
