Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 13 days ago
MM
Senior Forward Deployed Engineer
Mitchell Martin Inc.
Mississauga, ON
- $73 to $78 CAD / hour
- Other
Senior Forward Deployed Engineer -Mississauga, ON Hybrid - Contract -$73.00-$78.00 per Hr
Added 13 days ago
A
Senior QA – Backend Automation & Data Testing
Acunor
ON · Ontario, Canada
- Contract
We are seeking an experienced Senior QA Engineer with strong expertise in Python automation, backend testing, SQL, REST APIs, and cloud data pipeline validation. The ideal candidate will…
Added 13 days ago
MT
CAD Engineer- LEC
Mirafra Technologies
Canada
- Full-time
We are seeking an experienced LEC / Formal Verification CAD Engineer to join our Central CAD & Physical Design Methodology team. In this role, you will be responsible for defining,…
Added 13 days ago
T
Senior Consultant, ML/AI Engineer, Data & AI
Toast
Vancouver, BC
- $77,000 to $102,000 CAD / year
- Full-time
…professionals across the country, for a Senior Consultant, ML/AI Engineer to join its Data & AI practice in Vancouver. The firm helps some of Canada’s largest organizations solve complex…
Added 13 days ago
BR
DevOps Engineer
Benchmark Recruitment
Vancouver, BC · Greater Vancouver Metropolitan Area
- $113,900 to $147,400 CAD / year
- Full-time
Job Title: Senior DevOps Engineer – Site Reliability Engineering (SRE)
Added 13 days ago
MM
Senior Forward Deployed Engineer
Mitchell Martin Inc.
Mississauga, ON
- $62 to $67 CAD / hour
- Other
Senior Forward Deployed Engineer - Mississauga,ON Hybrid - Contract - $62.00-$67.00 Per Hr
Added 13 days ago
L
Forward Deployed Engineer
LinkedAi
Winnipeg, MB
- Full-time
Role Description The Forward Deployed Engineer is a full-time, hybrid role based in Winnipeg, MB, with flexibility for partial work from home. In this position, you will work directly with…
Added 13 days ago
Senior Network Development Engineer
NetBrain
Toronto, ON
We are looking for a Senior Network Development Engineer to own the engineering behind the correctness, coverage, and reliability of these resources. This role will design and build the…
Added 13 days ago
Data Engineer, Amazon Prime
Amazon
Vancouver, BC
- Experience as a data engineer or related specialty (e.g., software engineer, business intelligence engineer, data scientist) with a track record of manipulating, processing, and…
Added 13 days ago
AI
Senior Managed File Transfer Engineer (Messageway, Seeburger, SFTP, FTPS, Automation, Linux/Windows)
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
Added 13 days ago
A
Ingénieur de plateforme Databricks / Databricks platform engineer (Montréal)
Avanquest
Montreal, QC
- Full-time
Added 13 days ago
I
DevOps Engineer
INVOKE
Montreal, QC
- Full-time
We're looking for a DevOps engineer to help run and improve our setup on AWS. You'll work side by side with our developers to get code out smoothly, keep things running, and jump in when…
Added 13 days ago
AW
Data Analyst III
Agilus Work Solutions
Calgary, AB
- Contract
…modern analytics platforms (e.g., Databricks), advanced coding (Python, SQL,…
Added 13 days ago
PG
AWS SageMaker Engineer
Pacer Group
Toronto, ON
- $50 to $53 CAD / hour
- Contract
Job Title: Senior AWS SageMaker / MLOps Engineer
Added 13 days ago
IS
Senior QA Engineer (Python & French Language Mandatory)
InfiCare Staffing
Canada
- Contract
Looking for a Senior QA Engineer with strong Python automation, advanced SQL, AWS data pipeline testing, and backend/API testing experience. The role focuses on simulating high-volume…
Added 13 days ago
SI
AI Engineer
Siri InfoSolutions, Inc.
ON · Ontario, Canada
- Full-time
Design, build, and deploy Python-based AI/LLM applications using FastAPI/Flask.
Added 13 days ago
E
Security Consultant – Mobile & Web Application Security
Elastify
Toronto, ON · Greater Toronto Area, Canada
- Full-time
Reverse engineer and instrument mobile apps (static and dynamic analysis, runtime hooking, traffic interception, certificate-pinning and root/jailbreak-detection bypass)
Added 13 days ago
FR
Lead Software Engineer, Full-Stack Applications - AI Fluent
Fitch Ratings
Toronto, ON
- $180,000 to $220,000 CAD / year
- Full-time
Lead Software Engineer, Full-Stack Applications – AI Fluent
Added 13 days ago
E
Project Engineer - Water & Wastewater
EXP
Brampton, ON
- Full-time
Be our next Project Engineer - Water & Wastewater!
Added 13 days ago
M
CAD Engineer - AI Trainer
Mindrift
Remote, Canada
- Part-time
- Remote
Added 13 days ago
KS
ETL QA
Kumaran Systems
Toronto, ON
- Full-time
We are looking for an ETL QA Engineer with strong experience in
Added 13 days ago
TA
Agentic AI Architect
Tiger Analytics Inc.
Remote, Canada
- Remote
Development Skills: Strong production-grade programming skills in Python (preferred), TypeScript, or Java, along with experience in CI/CD pipelines for AI (LLMOps).
Added 13 days ago
Sr. Engineer, Mixed Signal ASIC Systems
SiTime Corporation
Ottawa, ON
As a Systems Engineer we are the first in line to work on brand new devices from Silicon Designers before they get into the hands of customers. The devices that SiTime Canada works on are…
Added 13 days ago
JG
Gen AI Developer
J&M Group
Mississauga, ON
- Contract
Reverse engineer application codebases (Python, Java, Angular, Mule) to auto-generate: Architecture diagrams. Data flow and sequence diagrams.
Added 13 days ago
AS
Cybersecurity Engineer
Axelon Services Corporation
Montreal, QC
- $55.17 CAD / hour
- Other
Experience in automation and scripting (e.g., PowerShell, Python) for operational efficiency.

Elastify

Security Consultant – Mobile & Web Application Security

Toronto, ON, Canada
Greater Toronto Area, Canada, Canada

Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Full-time
Apply by: Nov 26, 2026
Posting language: English
Posted: Oct 27, 2026

Original job description

We are hiring a Security Consultant who lives and breathes mobile application security. You will assess iOS and Android apps for our clients, find the flaws that matter, and help engineering teams fix them for good.

This is a hands-on, client-facing consulting role. You will run penetration tests end to end: scoping, testing, reporting, and readout. Mobile is the focus, but the apps you test talk to APIs, back-ends, and identity systems, so you will touch those too.

What you'll do

Perform penetration tests and security assessments of iOS and Android applications, including the APIs and back-end services they depend on
Reverse engineer and instrument mobile apps (static and dynamic analysis, runtime hooking, traffic interception, certificate-pinning and root/jailbreak-detection bypass)
Test against the OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Application Security Testing Guide (MASTG)
Review secure storage, cryptography, authentication, session handling, inter-process communication, deep links and third-party SDK usage
Write clear, actionable reports with reproducible steps, risk ratings and practical remediation guidance
Present findings to client engineering, product and executive stakeholders and support retesting
Contribute to internal tooling, testing methodology and knowledge sharing across the consulting team
Scope engagements and support pre-sales conversations as a mobile security subject matter expert

What you bring

4+ years in offensive security or application security, with at least 1 year focused on mobile application testing
Deep, demonstrable experience assessing both iOS and Android apps, including native (Swift/Objective-C, Kotlin/Java) and cross-platform frameworks (React Native, Flutter, Xamarin)
Fluency with the mobile testing toolchain: Frida, Objection, Burp Suite, MobSF, jadx, apktool, Hopper or Ghidra, and the iOS/Android debugging and instrumentation stack
Working knowledge of OWASP MASVS/MASTG and how to apply them in real engagements
Solid understanding of web and API security (OWASP Top 10, OAuth/OIDC, JWT, REST/GraphQL) as it relates to mobile back-ends
Strong report writing and the ability to explain technical risk to non-technical audiences
Comfortable working directly with clients and managing your own engagement timelines

Certifications

Professional certifications are strongly preferred, especially SANS/GIAC credentials in mobile testing.

GIAC Mobile Device Security Analyst (GMOB) – from SANS SEC575: iOS and Android Application Security Analysis and Penetration Testing. This is the credential we value most for this role.
Other SANS/GIAC offensive certifications are a strong plus: GPEN, GWAPT, GXPN, or GREM
Also recognized: OSCP, OSWE, CREST CRT/CCT, or the OWASP MAS Advocate designation

Candidates without formal certification but with a strong portfolio of mobile findings, CVEs, bug bounty results, or conference talks are encouraged to apply.

Nice to have

Experience with internal network penetration testing: Active Directory attack paths, lateral movement, privilege escalation, and tools such as Nmap, BloodHound, Impacket, Responder, and CrackMapExec/NetExec
Experience testing mobile device management (MDM), mobile banking/fintech, or healthcare apps and their regulatory requirements (PCI DSS, HIPAA, PIPEDA)
Familiarity with mobile malware analysis or firmware/IoT companion-app testing
Scripting ability in Python, Bash, or JavaScript to build or extend testing tooling
Published research, CVEs, open-source contributions, or talks in the mobile security space
Prior consulting or professional-services experience managing multiple client engagements

Apply on LinkedIn About employer

More about this job

Responsibilities

Conduct end-to-end security assessments of iOS and Android applications, including reverse engineering, testing APIs and back-end services, and evaluating mobile security controls. Write and present actionable findings, support remediation and retesting, and contribute to consulting methods, tools, and client engagement scoping.

Requirements

Applicants need at least four years of offensive or application security experience, including at least one year focused on mobile testing, with demonstrable experience assessing iOS and Android apps. They should be proficient with mobile testing tools and OWASP mobile standards, understand web and API security, and be able to write clear reports and manage client engagements; relevant certifications are strongly preferred.

Skills

iOS Security
Android Security
Static and Dynamic Analysis
Reverse Engineering
Runtime Instrumentation
API and Web Security
OWASP MASVS and MASTG
Frida
Objection
Burp Suite
Mobile Security Reporting
Client Engagement Management
Python
Bash
JavaScript

Visa sponsorship

Not detected in the job text

Keywords

iOS
Android
Swift
Objective-C
Kotlin
Java
React Native
Flutter
Xamarin
Frida
Objection
Burp Suite
MobSF
Jadx
Apktool
Hopper
Ghidra
OWASP MASVS
OWASP MASTG
OWASP Top 10
OAuth
OIDC
JWT
REST
GraphQL
GMOB
SANS SEC575
GPEN
GWAPT
GXPN

Report this job

Work requirements

Jobs in Canada