Find work in Canada.

512,618 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 12 hours ago
Sr. Analyst, Canada Commercial
Suntory Global Spirits
ON · Toronton, ON
Added 13 hours ago
Senior Business Analyst
Mariner
Halifax, NS
We are seeking an experienced Senior Business Analyst to support enterprise technology and business transformation initiatives for a client in Halifax, NS.
Added 13 hours ago
C
Application Development Lead, Vice President
Citi
Mississauga, ON
- Full-time
The Applications Development Technology Lead Analyst is a senior level position responsible for establishing and implementing new or revised application systems and programs in coordination…
Added 13 hours ago
C
Applications Development Tech Lead Analyst - VP
Citi
Mississauga, ON
- Full-time
The Applications Development Technology Lead Analyst is a senior level position responsible for establishing and implementing new or revised application systems and programs in coordination…
Added 13 hours ago
AE
Real Time Systems Analyst I
ATCO Electric
Vegreville, AB
- Full-time
The Real Time Systems Analyst I contributes to the team that is responsible for providing customer focused support to the System Operations Center by monitoring and maintaining the process…
Added 13 hours ago
SH
Health Records Chart Reviewer
Scarborough Health Network
Toronto, ON · Scarborough, ON
- Part-time
As a Data Analyst chart reviewer, you must be a CHIM certified with a dept knowledge of reviewing and analysing Inpatient medical coding (ICD10CA/CCI) in an Acute hospital setting.
Added 14 hours ago
SJ
Senior Analyst, Supply and Demand Planning
SC Johnson
Brantford, ON
- Full-time
As the Senior Analyst, Supply and Demand Planning, your primary responsibility is to own the relationship and input from sales. In this role you will ensure a forecast for a subset of the…
Added 14 hours ago
CO
Application & Integration Technical Analyst
City of Saint John
Saint John, NB
- Full-time
Under the direction of the designated IT Manager, the Application and Integration Technical Analyst is a technical lead responsible for system architecture, data strategy, and integration…
Added 14 hours ago
AS
IT Procurement Project Manager
Alquemy Search & Consulting
Calgary, AB
- Contract
IT Procurement Project Manager/Business Analyst
Added 14 hours ago
E
Security Consultant – Mobile & Web Application Security
Elastify
Toronto, ON · Greater Toronto Area, Canada
- Full-time
…the focus, but the apps you test talk to APIs, back-ends, and identity systems, so you will touch those…
Added 14 hours ago
II
Market Research Analyst, Innovation
Ipsos in Canada
Toronto, ON
- Full-time
Added 14 hours ago
FR
Lead Software Engineer, Full-Stack Applications - AI Fluent
Fitch Ratings
Toronto, ON
- $180,000 to $220,000 CAD / year
- Full-time
…modern engineering practices can improve developer productivity, analyst experience, decision support, and operational excellence. This is a critical leadership role for an organization…
Added 15 hours ago
P&
Analyste en opérabilité / Operability Analyst
Pratt & Whitney
Longueuil, QC
- Full-time
Added 15 hours ago
R
Program Analyst
Raise
Calgary, AB
- Full-time
Raise is currently hiring a Program Analyst on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader.…
Added 15 hours ago
PC
Junior Security Analyst
ProServeIT Corporation
Charlottetown, PE
- Full-time
Added 15 hours ago
A
Partners in Performance - Performance Strategy Business Analyst
Accenture
Toronto, ON
- Full-time
The Business Analyst role is an entry level role where you would be immediately exposed to being the frontline change agent for our clients. You are the primary source of reliable data and…
Added 15 hours ago
R
Risk Analyst - Proficient
Raise
Toronto, ON
- Full-time
We at Raise are hiring a Risk Analyst - Proficient for one of our top clients. After establishing themselves as an industry leader, they’re now expanding their team to meet rising demand.…
Added 15 hours ago
IS
Canadian Research Analyst (Temporary)
ISS STOXX
Toronto, ON
- Full-time
ISS STOXX is seeking a temporary Proxy Research Analyst to join its Canadian Research team in Toronto for the 2027 spring proxy season. The assignment is expected to begin in February 2027…
Added 15 hours ago
SL
Institutional Research Analyst
St. Lawrence College
Kingston, ON
- Part-time
Reporting to the Director, Program & Data Innovation, the Institutional Research Analyst provides extensive research and analysis services on a wide range of college activities at the…
Added 15 hours ago
CS
Application Production Support Analyst
Cynet Systems
Montreal, QC
- $438.81 CAD / day
- Contract
Added 15 hours ago
UT
Senior Analyst, Accounting & Tax-French #26-27224
US Tech Solutions
Laval, QC
- $31 USD / hour
- Contract
Added 16 hours ago
M
Accounting Analyst Intern - Winter 2027
McKesson
Mississauga, ON
- Full-time
…regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected…
Added 16 hours ago
C
Java Developer Lead Analyst - Vice President
Citi
Mississauga, ON
- Full-time
The Java Developer Lead Analyst is a senior level position responsible for establishing and implementing new or revised application systems and programs in coordination with the Technology…
Added 16 hours ago
R
Analyste en opérabilité / Operability Analyst
RTX
Longueuil, QC
- Full-time
Added 16 hours ago
Market Research Analyst, Innovation
Ipsos
Toronto, ON

Elastify

Security Consultant – Mobile & Web Application Security

Toronto, ON, Canada
Greater Toronto Area, Canada, Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Apply by: Nov 26, 2026
Posting language: English
Posted: Oct 27, 2026

Original job description

We are hiring a Security Consultant who lives and breathes mobile application security. You will assess iOS and Android apps for our clients, find the flaws that matter, and help engineering teams fix them for good.

This is a hands-on, client-facing consulting role. You will run penetration tests end to end: scoping, testing, reporting, and readout. Mobile is the focus, but the apps you test talk to APIs, back-ends, and identity systems, so you will touch those too.

What you'll do

Perform penetration tests and security assessments of iOS and Android applications, including the APIs and back-end services they depend on
Reverse engineer and instrument mobile apps (static and dynamic analysis, runtime hooking, traffic interception, certificate-pinning and root/jailbreak-detection bypass)
Test against the OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Application Security Testing Guide (MASTG)
Review secure storage, cryptography, authentication, session handling, inter-process communication, deep links and third-party SDK usage
Write clear, actionable reports with reproducible steps, risk ratings and practical remediation guidance
Present findings to client engineering, product and executive stakeholders and support retesting
Contribute to internal tooling, testing methodology and knowledge sharing across the consulting team
Scope engagements and support pre-sales conversations as a mobile security subject matter expert

What you bring

4+ years in offensive security or application security, with at least 1 year focused on mobile application testing
Deep, demonstrable experience assessing both iOS and Android apps, including native (Swift/Objective-C, Kotlin/Java) and cross-platform frameworks (React Native, Flutter, Xamarin)
Fluency with the mobile testing toolchain: Frida, Objection, Burp Suite, MobSF, jadx, apktool, Hopper or Ghidra, and the iOS/Android debugging and instrumentation stack
Working knowledge of OWASP MASVS/MASTG and how to apply them in real engagements
Solid understanding of web and API security (OWASP Top 10, OAuth/OIDC, JWT, REST/GraphQL) as it relates to mobile back-ends
Strong report writing and the ability to explain technical risk to non-technical audiences
Comfortable working directly with clients and managing your own engagement timelines

Certifications

Professional certifications are strongly preferred, especially SANS/GIAC credentials in mobile testing.

GIAC Mobile Device Security Analyst (GMOB) – from SANS SEC575: iOS and Android Application Security Analysis and Penetration Testing. This is the credential we value most for this role.
Other SANS/GIAC offensive certifications are a strong plus: GPEN, GWAPT, GXPN, or GREM
Also recognized: OSCP, OSWE, CREST CRT/CCT, or the OWASP MAS Advocate designation

Candidates without formal certification but with a strong portfolio of mobile findings, CVEs, bug bounty results, or conference talks are encouraged to apply.

Nice to have

Experience with internal network penetration testing: Active Directory attack paths, lateral movement, privilege escalation, and tools such as Nmap, BloodHound, Impacket, Responder, and CrackMapExec/NetExec
Experience testing mobile device management (MDM), mobile banking/fintech, or healthcare apps and their regulatory requirements (PCI DSS, HIPAA, PIPEDA)
Familiarity with mobile malware analysis or firmware/IoT companion-app testing
Scripting ability in Python, Bash, or JavaScript to build or extend testing tooling
Published research, CVEs, open-source contributions, or talks in the mobile security space
Prior consulting or professional-services experience managing multiple client engagements

Apply About employer

More about this job

Responsibilities

Conduct end-to-end security assessments of iOS and Android applications, including reverse engineering, testing APIs and back-end services, and evaluating mobile security controls. Write and present actionable findings, support remediation and retesting, and contribute to consulting methods, tools, and client engagement scoping.

Requirements

Applicants need at least four years of offensive or application security experience, including at least one year focused on mobile testing, with demonstrable experience assessing iOS and Android apps. They should be proficient with mobile testing tools and OWASP mobile standards, understand web and API security, and be able to write clear reports and manage client engagements; relevant certifications are strongly preferred.

Skills

iOS Security
Android Security
Static and Dynamic Analysis
Reverse Engineering
Runtime Instrumentation
API and Web Security
OWASP MASVS and MASTG
Frida
Objection
Burp Suite
Mobile Security Reporting
Client Engagement Management
Python
Bash
JavaScript

Visa sponsorship

Not detected in the job text

Keywords

iOS
Android
Swift
Objective-C
Kotlin
Java
React Native
Flutter
Xamarin
Frida
Objection
Burp Suite
MobSF
Jadx
Apktool
Hopper
Ghidra
OWASP MASVS
OWASP MASTG
OWASP Top 10
OAuth
OIDC
JWT
REST
GraphQL
GMOB
SANS SEC575
GPEN
GWAPT
GXPN

Report this job