Penetration Testers

What this job is

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

What they do day to day

• Document penetration test findings.
• Identify security system weaknesses, using penetration tests.
• Write audit reports to communicate technical and procedural findings and recommend solutions.
• Gather cyber intelligence to identify vulnerabilities.
• Maintain up-to-date knowledge of hacking trends.
• Keep up with new penetration testing tools and methods.
• Identify new threat tactics, techniques, or procedures used by cyber threat actors.
• Conduct network and security system audits, using established criteria.
• Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
• Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.

Skills and knowledge that matter most

Importance rated by people working in the job (1 = not important, 5 = extremely important).

Education and preparation

Preparation level 4 of 5 — Considerable preparation. Usually a bachelor's degree and several years of related experience.

Typical entry education (BLS): Bachelor's degree.

Who this job suits

Based on the Holland (RIASEC) interest profile for this occupation.

Job titles you'll see in postings

Related careers

• Information Security Engineers$116,580
• Information Security Analysts$129,180
• Software Quality Assurance Analysts and Testers$104,300
• Computer Systems Analysts$105,850
• Computer Systems Engineers/Architects$116,580
• Software Developers$135,980
• Validation Engineers$102,440
• Database Administrators$104,620