Web Application Penetration Tester

This is a fully remote position, open to applicants in Australia.

📋 Description

• Conduct comprehensive manual penetration tests on web applications across customer environments.

• Evaluate authentication processes, business logic, and complex exploit sequences.

• Transform unique discoveries into reproducible methodologies incorporated into Nullify’s detection and validation systems.

• Collaborate with customer security teams throughout the process from initial scoping to final reporting.

• Monitor emerging frameworks, authentication methods, and classes of vulnerabilities.

⛳️ Requirements

• Hands-on experience in identifying and exploiting vulnerabilities within live web applications, including knowledge of the OWASP Top 10 and more.

• Proficiency in reviewing application code and tracing request flows.

• Capability to develop custom tools when existing solutions do not meet needs.

• Skill in validating findings prior to reporting them.

• Experience in training or assessing AI systems for security-related tasks is a plus.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Flexible working hours and remote work options.

• Opportunities for professional development and continuous learning.

• Dynamic and inclusive work environment.