Penetration Testers
Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.
Also known as: Application Security Assessor, Application Security Hacker, Application Security Tester, Certified Hacker, Certified Tester, Consulting Advisory Tester, Cyber Analyst, Cyber Assessment Tester, ...
Annual Salary
Median annual wage (May 2024)
Job Outlook
Projected growth, 2024–2034 (Much faster than average)
What You'd Do
- Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
- Collect stakeholder data to evaluate risk and to develop mitigation strategies.
- Conduct network and security system audits, using established criteria.
- Configure information systems to incorporate principles of least functionality and least access.
- Design security solutions to address known device vulnerabilities.
- Develop and execute tests that simulate the techniques of known cyber threat actors.
- Develop infiltration tests that exploit device vulnerabilities.
- Develop presentations on threat intelligence.
- Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
- Discuss security solutions with information technology teams or management.
- Document penetration test findings.
- Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.
- Gather cyber intelligence to identify vulnerabilities.
- Identify new threat tactics, techniques, or procedures used by cyber threat actors.
- Identify security system weaknesses, using penetration tests.
- Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.
- Keep up with new penetration testing tools and methods.
- Maintain up-to-date knowledge of hacking trends.
- Prepare and submit reports describing the results of security fixes.
- Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
Technology & Tools
Software and tools commonly used in this role
In-Demand Technologies
Work Styles
Personality traits and work styles important for this career
Related Careers
Is Penetration Testers right for you?
Take our free career quiz to see how you match with this and 900+ other careers.
Salary data: BLS Occupational Employment and Wage Statistics, May 2024. Outlook data: BLS Employment Projections, 2024–2034.
This page includes information from the O*NET 30.2 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license.