Senior Web App Penetration Tester: Hands-On, AI-Savvy

Black Nova Venture Capital; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Nullify is seeking a hands-on security tester to perform deep, manual pentests on customer web applications in Sydney. You will go beyond automated scans to validate auth flows, business logic, and multi-step exploit chains, feeding results back into our detection system.

You will partner with customer security teams from scoping to reporting and continuously learn new frameworks and patterns to stay ahead of threats.

Qualifications

• Production web apps security experience across real-world environments.
• Experience analyzing auth flows and business logic for vulnerabilities.
• Ability to reproduce findings as repeatable techniques for automation.

Responsibilities

• Run deep, manual web app pentests for clients, beyond automated scans.
• Convert findings into reproducible techniques and feed them into detection systems.
• Collaborate with client security teams from scoping to reporting.
• Stay ahead of new frameworks, auth patterns, and vulnerability classes.

Skills

Penetration testing

OWASP Top 10

Manual web app testing

Security tooling

Tools

Custom tooling development

Job description

Nullify is seeking a hands-on security tester to perform deep, manual pentests on customer web applications in Sydney. You will go beyond automated scans to validate auth flows, business logic, and multi-step exploit chains, feeding results back into our detection system.

You will partner with customer security teams from scoping to reporting and continuously learn new frameworks and patterns to stay ahead of threats.