Find work in Canada.

508,432 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 1 min ago
DC
Strategic Lead – Transportation Planning & Strategy
Dillon Consulting Limited
Guelph, ON · Hamilton, ON · Kingston, ON · Kitchener, ON · London, ON · Oakville, ON · Ottawa, ON · Toronto, ON · Vaughan, ON · Windsor, ON · North York, ON
- Full-time
…Transportation Planning & Strategy team. Designed for a planner or engineer with over 12 years of experience, this role carries a dual role: shape the market strategy to grow our…
Added 16 mins ago
A
Monitoring Tool Automation Engineer : Toronto, ON (Hybrid) : FTE
AceStack
Toronto, ON
- Full-time
Job Title: Monitoring Tool Automation Engineer
Added 16 mins ago
AI
Desktop Support Engineer
Apptoza Inc.
Montreal, QC
- Full-time
Added 16 mins ago
SS
Senior Desktop Engineer
Staffmax Staffing & Recruiting
Montreal, QC
- $110,000 to $120,000 CAD / year
- Full-time
Added 16 mins ago
A
Team Lead, Transportation Infrastructure
AtkinsRéalis
Calgary, AB
- Full-time
Registered as a Professional Engineer (P.Eng.) with APEGA.
Added 17 mins ago
GC
Project Manager (Engineering)
Giffen Consulting
St. John's, NL
- Full-time
Registered as a Professional Engineer or Applied Science Technologist in Canada or eligible to register.
Added 31 mins ago
FC
Senior DevSecOps Engineer
Fintel Connect
Vancouver, BC
- Full-time
As a Senior DevSecOps Engineer, you will lead the implementation and continuous improvement of cloud security, infrastructure automation, platform reliability, and DevSecOps practices…
Added 31 mins ago
M
Software Engineer - II
Mastercard
Vancouver, BC
- Full-time
Added 31 mins ago
M
Senior AI Engineer, Big Data & AI Solutions
Mastercard
Vancouver, BC
- Full-time
Senior AI Engineer, Big Data & AI SolutionsWho is Mastercard?
Added 46 mins ago
RI
IOS mobile testing
Raas Infotek
Vancouver, BC
- Contract
Looking for an SDET – Mobility (IOS) Engineer. The team is responsible for application architecture, development and innovation of new feature development to support consumer solutions. In…
Added 1 hour ago
K
Software Engineer in Test
Kelly
Mississauga, ON
- Contract
Added 1 hour ago
RD
Cloud Engineer (Azure & IaC)
Randstad Digital
Toronto, ON · Greater Toronto Area, Canada
- Full-time
…Microsoft Azure, is seeking a hands-on, automation-driven Cloud Engineer to sit at the center of this transformation. Working as part of a collaborative technology team, the role is 90%…
Added 1 hour ago
S
Software Engineer (Unpaid)
Spawn
Canada
- Temporary
Added 1 hour ago
RB
Senior Software Quantitative Engineer
Royal Bank of Canada
Vancouver, BC · Toronto, ON
- Full-time
Added 1 hour ago
TI
Project Engineer (Laval)
Trane Italia
Laval, QC · Longueuil, QC
- Full-time
Trane in Laval is hiring for a Controls Project Engineer to join our team. In this role, you will be responsible for hardware and software design activities for building automation systems.…
Added 1 hour ago
BG
Electrical Engineer
Brandt Group of Companies
Zehner
- Full-time
The Electrical Engineer is responsible for the design and coordinating of Electrical Engineering works associated with the construction of new buildings and renovation projects for the…
Added 1 hour ago
BG
Design Engineer
Brandt Group of Companies
Zehner
- Full-time
Added 1 hour ago
BG
Senior Civil Engineer
Brandt Group of Companies
Zehner
- Full-time
Professional Engineer (P.Eng.) designation in Canada
Added 1 hour ago
BG
Engineering Team Lead - Tillage
Brandt Group of Companies
Zehner
- Full-time
Professional Engineer or Technologist designation
Added 1 hour ago
BG
Lead Civil Engineer
Brandt Group of Companies
Zehner
- Full-time
Brandt Developments has a Lead Civil Engineer position available at our Regina, Saskatchewan location. This position is responsible for the design and approval of Civil Engineering works…
Added 1 hour ago
BG
Structural Engineer
Brandt Group of Companies
Zehner
- Full-time
Professional Engineer or Technologist with 2+ years industry experience
Added 1 hour ago
BG
Quality Engineer
Brandt Group of Companies
Zehner
- Full-time
The Quality Engineer is responsible for monitoring product and process quality throughout Brandt’s internal and external suppliers. This role collects and analyzes quality data, performs…
Added 1 hour ago
T
Data Integration Engineer
TekRek
Canada
- Contract
Added 1 hour ago
QT
Desktop Senior Engineer(Banking/ Financial Services background)- Local to Montreal, QC
Q1 Technologies, Inc.
Montreal, QC
- $100,000 to $120,000 CAD / year
- Full-time
Added 1 hour ago
DC
Intermediate Electrical Designer/Engineer
Danaher Corporation
Concord, ON · CAN - Concord - AB Sciex LP
- $90,000 to $103,000 CAD / year
- Full-time
The Intermediate Electrical Designer/Engineer is responsible for designing electrical hardware based on input requirements and support implementation and system integration activities while…

Elastify

Security Consultant – Mobile & Web Application Security

Toronto, ON, Canada
Greater Toronto Area, Canada, Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Apply by: Nov 26, 2026
Posting language: English
Posted: Oct 27, 2026

Original job description

We are hiring a Security Consultant who lives and breathes mobile application security. You will assess iOS and Android apps for our clients, find the flaws that matter, and help engineering teams fix them for good.

This is a hands-on, client-facing consulting role. You will run penetration tests end to end: scoping, testing, reporting, and readout. Mobile is the focus, but the apps you test talk to APIs, back-ends, and identity systems, so you will touch those too.

What you'll do

Perform penetration tests and security assessments of iOS and Android applications, including the APIs and back-end services they depend on
Reverse engineer and instrument mobile apps (static and dynamic analysis, runtime hooking, traffic interception, certificate-pinning and root/jailbreak-detection bypass)
Test against the OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Application Security Testing Guide (MASTG)
Review secure storage, cryptography, authentication, session handling, inter-process communication, deep links and third-party SDK usage
Write clear, actionable reports with reproducible steps, risk ratings and practical remediation guidance
Present findings to client engineering, product and executive stakeholders and support retesting
Contribute to internal tooling, testing methodology and knowledge sharing across the consulting team
Scope engagements and support pre-sales conversations as a mobile security subject matter expert

What you bring

4+ years in offensive security or application security, with at least 1 year focused on mobile application testing
Deep, demonstrable experience assessing both iOS and Android apps, including native (Swift/Objective-C, Kotlin/Java) and cross-platform frameworks (React Native, Flutter, Xamarin)
Fluency with the mobile testing toolchain: Frida, Objection, Burp Suite, MobSF, jadx, apktool, Hopper or Ghidra, and the iOS/Android debugging and instrumentation stack
Working knowledge of OWASP MASVS/MASTG and how to apply them in real engagements
Solid understanding of web and API security (OWASP Top 10, OAuth/OIDC, JWT, REST/GraphQL) as it relates to mobile back-ends
Strong report writing and the ability to explain technical risk to non-technical audiences
Comfortable working directly with clients and managing your own engagement timelines

Certifications

Professional certifications are strongly preferred, especially SANS/GIAC credentials in mobile testing.

GIAC Mobile Device Security Analyst (GMOB) – from SANS SEC575: iOS and Android Application Security Analysis and Penetration Testing. This is the credential we value most for this role.
Other SANS/GIAC offensive certifications are a strong plus: GPEN, GWAPT, GXPN, or GREM
Also recognized: OSCP, OSWE, CREST CRT/CCT, or the OWASP MAS Advocate designation

Candidates without formal certification but with a strong portfolio of mobile findings, CVEs, bug bounty results, or conference talks are encouraged to apply.

Nice to have

Experience with internal network penetration testing: Active Directory attack paths, lateral movement, privilege escalation, and tools such as Nmap, BloodHound, Impacket, Responder, and CrackMapExec/NetExec
Experience testing mobile device management (MDM), mobile banking/fintech, or healthcare apps and their regulatory requirements (PCI DSS, HIPAA, PIPEDA)
Familiarity with mobile malware analysis or firmware/IoT companion-app testing
Scripting ability in Python, Bash, or JavaScript to build or extend testing tooling
Published research, CVEs, open-source contributions, or talks in the mobile security space
Prior consulting or professional-services experience managing multiple client engagements

Apply About employer

More about this job

Responsibilities

Conduct end-to-end security assessments of iOS and Android applications, including reverse engineering, testing APIs and back-end services, and evaluating mobile security controls. Write and present actionable findings, support remediation and retesting, and contribute to consulting methods, tools, and client engagement scoping.

Requirements

Applicants need at least four years of offensive or application security experience, including at least one year focused on mobile testing, with demonstrable experience assessing iOS and Android apps. They should be proficient with mobile testing tools and OWASP mobile standards, understand web and API security, and be able to write clear reports and manage client engagements; relevant certifications are strongly preferred.

Skills

iOS Security
Android Security
Static and Dynamic Analysis
Reverse Engineering
Runtime Instrumentation
API and Web Security
OWASP MASVS and MASTG
Frida
Objection
Burp Suite
Mobile Security Reporting
Client Engagement Management
Python
Bash
JavaScript

Visa sponsorship

Not detected in the job text

Keywords

iOS
Android
Swift
Objective-C
Kotlin
Java
React Native
Flutter
Xamarin
Frida
Objection
Burp Suite
MobSF
Jadx
Apktool
Hopper
Ghidra
OWASP MASVS
OWASP MASTG
OWASP Top 10
OAuth
OIDC
JWT
REST
GraphQL
GMOB
SANS SEC575
GPEN
GWAPT
GXPN

Report this job