Teams at Black Nova Venture Capital

Run technical evaluations and proofs of concept against prospects’ codebases and cloud environments. Explain security findings to CISOs and engineering leaders, support technical sales cycles, handle objections, and help close deals. Feed customer and field insights back to product and engineering teams. The role requires hands-on security or software engineering capability, technical POC experience, code and vulnerability analysis skills, and strong customer-facing communication.

Conduct manual web application penetration tests, focusing on authentication flows, business logic, and multi-step exploit chains. Validate automated security findings, discover novel vulnerabilities, develop custom tooling, and encode reproducible techniques into Nullify’s detection and validation agents. Collaborate with customer security teams throughout engagements, from scoping through reporting, while staying current with emerging frameworks, authentication patterns, and vulnerability classes.

Build and harden a multi-provider agent runtime for automated vulnerability detection, validation, and fix preparation. Develop agents capable of reasoning about business logic and application behavior, create evaluation harnesses with labeled tests and regression tracking, and own agent workflows from detection through fix generation. The role requires production software engineering, experience with multi-step LLM agents and tool use, rigorous measurement practices, and a strong interest in security.