Web Application Penetration Tester - Nullify
Black Nova Venture Capital Pty Ltd · Sydney, Sydney Region ·
- Category
- Security
The Web Application Penetration Tester will perform manual security assessments on customer web applications, focusing on complex areas like business logic and authentication. The role involves validating automated findings and developing new exploit techniques to improve the company's autonomous security platform.
Nullify runs autonomous security work most teams can't staff for. This role is the human edge of that — validating what our agents find, going after what they can't, and feeding every technique back into the system so it gets sharper. What you'll do Run deep, manual web app pentests against customer surface area that automated scanning alone won't catch — auth flows, business logic, multi-step exploit chains. Turn novel findings into reproducible techniques that get encoded back into Nullify's …