Guidance.help

Penetration Testers

The occupation Penetration Testers covers people who evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. O*NET rates it as considerable preparation, which usually means a bachelor’s degree plus a period of work experience. It leans on critical thinking, writing, and reading comprehension. A regular part of the work is to document penetration test findings. Interest ratings put Investigative on top at 5.2 out of 7 and Conventional second, so the code is ICR and the day leans toward research, analysis and working through hard problems. If you want research, analysis and working through hard problems, keep it on your list. If you need creative work with room for original expression, it may feel thin.

What they do

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

Main tasks

  • Document penetration test findings.
  • Identify security system weaknesses, using penetration tests.
  • Write audit reports to communicate technical and procedural findings and recommend solutions.
  • Gather cyber intelligence to identify vulnerabilities.
  • Maintain up-to-date knowledge of hacking trends.
  • Keep up with new penetration testing tools and methods.

Skills

  • Critical Thinking
  • Writing
  • Reading Comprehension
  • Programming
  • Complex Problem Solving
  • Active Listening

Who this career fits

May suit you if

  • You enjoy working out why something happens, not just what happened.
  • You like clear rules and getting the details right.
  • You are ready to spend around four years on a degree, then build experience.
  • You are comfortable relying on critical thinking and writing.

May not suit you if

  • You lose interest when a job asks for long stretches of analysis.
  • You need creative expression to be a big part of your day. Artistic rates 1.3 out of 7 here.
  • You want to avoid a four-year degree or its equivalent.

Interest profile

O*NET rates each occupation from 1 to 7 on six interest types. The code ICR takes the three highest, and Investigative comes first here.

Preparation

Considerable preparation. Most jobs here ask for a bachelor’s degree, and employers usually expect a few years of related experience as well.

Also called

  • Cyber Systems Engineer
  • Security Consultant
  • Security Engineer
  • System Vulnerability Analyst
  • Threat Hunter

Related careers

Is this your direction?

See how your interests line up with ICR and 906 other careers.

Take the career test

This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET® is a trademark of USDOL/ETA.