Jobs in Canada

Group jobs by employerEmail me new jobs Save this search

Added 14 days ago
RI
Senior SDET – iOS Automation (Xcode, XCUI, Python/Java)
Raas Infotek
Vancouver, BC
- Contract
Must have strong: At least 5+ years of exp in Automation/SDET, iOS testing, Xcode, XCUI, python or java coding
Added 14 days ago
RI
SDET/Automation – Mobility (IOS Applications)
Raas Infotek
Vancouver, BC
- Contract
Must have strong experience: At least 5+ years of exp in Automation/SDET, iOS testing, Xcode, XCUI, python or java coding
Added 14 days ago
M
Senior Full Stack Developer (Java/React)
Miratech
Toronto, ON
- Full-time
Working Model: This is a hybrid role requiring 2 days per week in a downtown Toronto office
Added 14 days ago
TC
Senior Forward Deployed Engineer
TSR Consulting
Mississauga, ON
- Contract
We are seeking a Senior Forward Deployed Engineer Spread Products (Financing & Securitization) to join our dynamic team. The ideal candidate will have strong experience in Java, Python,…
Added 14 days ago
Full Stack Engineer - Equities Technology
HSBC Global Services Limited
Toronto, ON
…extensible and high-performing global platform. As a Full Stack Engineer within Cash & Electronic, you will design and deliver enhancements that support low-latency trading and real-time…
Added 14 days ago
TA
Agentic AI Architect
Tiger Analytics
Canada
- Full-time
Development Skills: Strong production-grade programming skills in Python (preferred), TypeScript, or Java, along with experience in CI/CD pipelines for AI (LLMOps)
Added 14 days ago
MM
Senior Forward Deployed Engineer
Mitchell Martin Inc.
Mississauga, ON
- $73 to $78 CAD / hour
- Other
Senior Forward Deployed Engineer -Mississauga, ON Hybrid - Contract -$73.00-$78.00 per Hr
Added 14 days ago
KS
Java - Lead Developer
Kumaran Systems
Toronto, ON
- Full-time
…every engagement. At Kumaran, we don’t just solve problems, we engineer future-ready…
Added 14 days ago
BR
Java Software Engineer
Benchmark Recruitment
Vancouver, BC · Greater Vancouver Metropolitan Area
- Contract
6-month contract | Onsite in the Greater Vancouver Metropolitan Area | Hourly Rate: $63-73/hour | Must hold a valid Canadian Work Visa · This is a 100% onsite position in Vancouver, BC, with an expectation of five days per week in the office
Added 14 days ago
MM
Senior Forward Deployed Engineer
Mitchell Martin Inc.
Mississauga, ON
- $62 to $67 CAD / hour
- Other
Senior Forward Deployed Engineer - Mississauga,ON Hybrid - Contract - $62.00-$67.00 Per Hr
Added 14 days ago
Senior Software Engineer, Frontend
OpenTable
Toronto, ON
This hybrid role requires working in the office two days per week
Added 14 days ago
QT
QE Automation Engineer(Java, Selenium, Lending Decisioning, FICO, Kafka)
Q1 Technologies, Inc.
Toronto, ON
- $45 to $47 CAD / hour
- Contract
Work Model: Hybrid (4 days per week in office) at Toronto, ON
Added 14 days ago
MM
Senior Software Development Engineer
Mitchell Martin Inc.
Mississauga, ON
- $68 to $78 CAD / hour
- Other
Senior Software Development Engineer - Hybrid - Contract -$68.00-$78.00 Per Hr
Added 14 days ago
E
Security Consultant – Mobile & Web Application Security
Elastify
Toronto, ON · Greater Toronto Area, Canada
- Full-time
Reverse engineer and instrument mobile apps (static and dynamic analysis, runtime hooking, traffic interception, certificate-pinning and root/jailbreak-detection bypass)
Added 14 days ago
TA
Agentic AI Architect
Tiger Analytics Inc.
Remote, Canada
- Remote
Development Skills: Strong production-grade programming skills in Python (preferred), TypeScript, or Java, along with experience in CI/CD pipelines for AI (LLMOps).
Added 14 days ago
JG
Gen AI Developer
J&M Group
Mississauga, ON
- Contract
Reverse engineer application codebases (Python, Java, Angular, Mule) to auto-generate: Architecture diagrams. Data flow and sequence diagrams.
Added 14 days ago
T
Quality Engineer II
TD
Toronto, ON
- Full-time
Hands on experience in Java, GitHub and RestAssured
Added 14 days ago
MI
Senior Java Software Engineer
Maarut Inc
Toronto, ON
- Contract
Extensive hands-on Java development experience with Oracle, SQL, or comparable relational databases.
Added 14 days ago
RI
Senior Full Stack Engineer - Java / AI
Rose International
Mississauga, ON
- Full-time
Join a dynamic Front Office Technology team as a Senior Software Engineer (Java / AI), helping build the future of financial technology.
Added 14 days ago
T
Container Security Engineer
TheCorporate
ON · Ontario, Canada
- Contract
Strong programming/scripting skills in languages such as Python, Go, bash/shell, Java, NodeJS.
Added 14 days ago
F
Senior Quality Assurance Engineer
FireFlink
Toronto, ON
- Full-time
The QA Engineer III will be responsible for leading and executing functional quality assurance activities for complex banking and financial applications. The role requires strong hands-on…
Added 15 days ago
HS
Senior Integration Engineer (Boomi/Workato)
HeartCentrix Solutions
ON · Ontario, Canada
- Contract
We are seeking a Senior Integration Engineer with deep expertise in Boomi and Workato, specializing in payroll and HR system integrations. This role will focus on designing, developing, and…
Added 15 days ago
FI
Full Stack Engineer
Flexton Inc.
Toronto, ON
- Full-time
Experience with Java/Spring MVC, JavaScript , Jenkins (CI/CD) experience Strong in DS/Algorithms, React, HTML5 knowledge, NodeJS/ Java Script, working with data (Oracle/NoSQL),
Added 15 days ago
II
Sr. SDET Engineer
ITC Infotech
Vancouver, BC
- $81,194 to $117,853 CAD / year
- Full-time
We are seeking a Sr. SDET Engineer with strong Test leadership skills and hands-on experience to Data/ETL Testing, Automation Testing and Test leadership activities. The role focuses on…
Added 15 days ago
Y
SDET/Automation – Mobility (IOS Applications)
Yochana
Vancouver, BC
- Contract
Must have strong: At least 5+ years of exp in Automation/SDET, iOS testing, Xcode, XCUI, python or java coding

Elastify

Security Consultant – Mobile & Web Application Security

Toronto, ON, Canada
Greater Toronto Area, Canada, Canada

Full-time

Apply on LinkedIn About employer

Applications open in a new tab.

Job details

Job type: Full-time
Apply by: Nov 26, 2026
Posting language: English
Posted: Oct 27, 2026

Original job description

We are hiring a Security Consultant who lives and breathes mobile application security. You will assess iOS and Android apps for our clients, find the flaws that matter, and help engineering teams fix them for good.

This is a hands-on, client-facing consulting role. You will run penetration tests end to end: scoping, testing, reporting, and readout. Mobile is the focus, but the apps you test talk to APIs, back-ends, and identity systems, so you will touch those too.

What you'll do

Perform penetration tests and security assessments of iOS and Android applications, including the APIs and back-end services they depend on
Reverse engineer and instrument mobile apps (static and dynamic analysis, runtime hooking, traffic interception, certificate-pinning and root/jailbreak-detection bypass)
Test against the OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Application Security Testing Guide (MASTG)
Review secure storage, cryptography, authentication, session handling, inter-process communication, deep links and third-party SDK usage
Write clear, actionable reports with reproducible steps, risk ratings and practical remediation guidance
Present findings to client engineering, product and executive stakeholders and support retesting
Contribute to internal tooling, testing methodology and knowledge sharing across the consulting team
Scope engagements and support pre-sales conversations as a mobile security subject matter expert

What you bring

4+ years in offensive security or application security, with at least 1 year focused on mobile application testing
Deep, demonstrable experience assessing both iOS and Android apps, including native (Swift/Objective-C, Kotlin/Java) and cross-platform frameworks (React Native, Flutter, Xamarin)
Fluency with the mobile testing toolchain: Frida, Objection, Burp Suite, MobSF, jadx, apktool, Hopper or Ghidra, and the iOS/Android debugging and instrumentation stack
Working knowledge of OWASP MASVS/MASTG and how to apply them in real engagements
Solid understanding of web and API security (OWASP Top 10, OAuth/OIDC, JWT, REST/GraphQL) as it relates to mobile back-ends
Strong report writing and the ability to explain technical risk to non-technical audiences
Comfortable working directly with clients and managing your own engagement timelines

Certifications

Professional certifications are strongly preferred, especially SANS/GIAC credentials in mobile testing.

GIAC Mobile Device Security Analyst (GMOB) – from SANS SEC575: iOS and Android Application Security Analysis and Penetration Testing. This is the credential we value most for this role.
Other SANS/GIAC offensive certifications are a strong plus: GPEN, GWAPT, GXPN, or GREM
Also recognized: OSCP, OSWE, CREST CRT/CCT, or the OWASP MAS Advocate designation

Candidates without formal certification but with a strong portfolio of mobile findings, CVEs, bug bounty results, or conference talks are encouraged to apply.

Nice to have

Experience with internal network penetration testing: Active Directory attack paths, lateral movement, privilege escalation, and tools such as Nmap, BloodHound, Impacket, Responder, and CrackMapExec/NetExec
Experience testing mobile device management (MDM), mobile banking/fintech, or healthcare apps and their regulatory requirements (PCI DSS, HIPAA, PIPEDA)
Familiarity with mobile malware analysis or firmware/IoT companion-app testing
Scripting ability in Python, Bash, or JavaScript to build or extend testing tooling
Published research, CVEs, open-source contributions, or talks in the mobile security space
Prior consulting or professional-services experience managing multiple client engagements

Apply on LinkedIn About employer

More about this job

Responsibilities

Conduct end-to-end security assessments of iOS and Android applications, including reverse engineering, testing APIs and back-end services, and evaluating mobile security controls. Write and present actionable findings, support remediation and retesting, and contribute to consulting methods, tools, and client engagement scoping.

Requirements

Applicants need at least four years of offensive or application security experience, including at least one year focused on mobile testing, with demonstrable experience assessing iOS and Android apps. They should be proficient with mobile testing tools and OWASP mobile standards, understand web and API security, and be able to write clear reports and manage client engagements; relevant certifications are strongly preferred.

Skills

iOS Security
Android Security
Static and Dynamic Analysis
Reverse Engineering
Runtime Instrumentation
API and Web Security
OWASP MASVS and MASTG
Frida
Objection
Burp Suite
Mobile Security Reporting
Client Engagement Management
Python
Bash
JavaScript

Visa sponsorship

Not detected in the job text

Keywords

iOS
Android
Swift
Objective-C
Kotlin
Java
React Native
Flutter
Xamarin
Frida
Objection
Burp Suite
MobSF
Jadx
Apktool
Hopper
Ghidra
OWASP MASVS
OWASP MASTG
OWASP Top 10
OAuth
OIDC
JWT
REST
GraphQL
GMOB
SANS SEC575
GPEN
GWAPT
GXPN

Report this job

Work requirements

Jobs in Canada