What do penetration testers do?
Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.
This describes a U.S. occupation, not a live vacancy. Individual employers may use different titles and requirements.
Job titles to recognize in your search
O*NET reports these titles for this occupation. Compare the responsibilities in each posting before treating titles as equivalent.
- Cyber Systems Engineer
- Security Consultant
- Security Engineer
- System Vulnerability Analyst
- Threat Hunter
- Vulnerability Assessor
Core tasks to compare with a job posting
- Document penetration test findings.
- Identify security system weaknesses, using penetration tests.
- Write audit reports to communicate technical and procedural findings and recommend solutions.
- Gather cyber intelligence to identify vulnerabilities.
- Maintain up-to-date knowledge of hacking trends.
- Keep up with new penetration testing tools and methods.
- Identify new threat tactics, techniques, or procedures used by cyber threat actors.
- Conduct network and security system audits, using established criteria.
- Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
- Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
Prepare an application for this occupation
- Check the employer’s requirements, location, schedule and any licenses against your situation.
- Choose two or three tasks above that match the posting and your actual experience.
- Build a resume evidence worksheet using the skills and software relevant to that employer.
- Practice explaining your contribution, decisions and results before an interview.
Ready to plan your search?
Start with penetration testers as your target. You can change your role in the quiz and tell us your location and work preferences.