Penetration Testers

What the job really is

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

At a glance

• Sector: Computer & Mathematical
• O*NET-SOC code: 15-1299
• O*NET job zone: 4 — considerable preparation
• Work sample tasks on file: 12
• Tools and technologies listed: 12

What you actually do

Work sample tasks recorded for this occupation:

• Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
• Collect stakeholder data to evaluate risk and to develop mitigation strategies.
• Conduct network and security system audits, using established criteria.
• Configure information systems to incorporate principles of least functionality and least access.
• Design security solutions to address known device vulnerabilities.
• Develop and execute tests that simulate the techniques of known cyber threat actors.
• Develop infiltration tests that exploit device vulnerabilities.
• Develop presentations on threat intelligence.
• Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
• Discuss security solutions with information technology teams or management.
• Document penetration test findings.
• Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.

Tools and technology

Amazon Web Services AWS software, Ansible software, Apple iOS, Apple macOS, Bash, C, C#, C++, Docker, Firewall software, GitHub, Go

What employers expect you to already be comfortable with.

Where this job leads

Related occupations — the usual moves up and sideways:

• Information Security Engineers
• Information Security Analysts
• Software Quality Assurance Analysts and Testers
• Computer Systems Analysts
• Computer Systems Engineers/Architects
• Software Developers
• Validation Engineers
• Database Administrators

Getting in

O*NET assigns this occupation job zone 4 (considerable preparation). The related occupations above are the realistic routes in and out.

Find openings

Browse the verified job sources directory, or explore more occupations.

Check this against the source

O*NET OnLine: Penetration Testers — the authoritative public-domain profile this page is derived from, including the full task list, reported skills and the wage estimates for your region.

Derived and rewritten from the public-domain O*NET database (U.S. Department of Labor / Employment and Training Administration). Figures are observations, not promises — always confirm salary, licensing and visa requirements with the employer and the relevant authority.