Penetration Testers

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

Bright Outlook

Interest Profile (RIASEC)

Key Tasks

Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.

Collect stakeholder data to evaluate risk and to develop mitigation strategies.

Conduct network and security system audits, using established criteria.

Configure information systems to incorporate principles of least functionality and least access.

Design security solutions to address known device vulnerabilities.

Develop and execute tests that simulate the techniques of known cyber threat actors.

Develop infiltration tests that exploit device vulnerabilities.

Develop presentations on threat intelligence.

Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.

Discuss security solutions with information technology teams or management.

Document penetration test findings.

Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.

Gather cyber intelligence to identify vulnerabilities.

Identify new threat tactics, techniques, or procedures used by cyber threat actors.

Identify security system weaknesses, using penetration tests.

Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.

Keep up with new penetration testing tools and methods.

Maintain up-to-date knowledge of hacking trends.

Prepare and submit reports describing the results of security fixes.

Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.

Update corporate policies to improve cyber security.

Write audit reports to communicate technical and procedural findings and recommend solutions.

Technology Skills

Development environment software

Go
Microsoft PowerShell
Oracle Java 2 Platform Enterprise Edition J2EE
Ruby

Operating system software

Apple iOS
Bash
Google Android
Shell script

Transaction security and virus protection software

Invicti Acunetix
Metasploit
Rapid7 software
Tenable Nessus

Object or component oriented development software

C#
C++
Oracle Java
Perl

Web platform development software

JavaScript
Microsoft Active Server Pages ASP
PHP
RESTful API

Data base user interface and query software

Amazon Web Services AWS software
Microsoft SQL Server
ServiceNow
Structured query language SQL

Application server software

Docker
GitHub
Kubernetes

Program testing software

Kali Linux
MITRE ATT&CK software
System testing software

Network monitoring software

IBM QRadar SIEM
Wireshark

Transaction server software

IBM Middleware
Web server software

Compiler and decompiler software

Hex-Rays IDA Pro
Vector 35 Binary Ninja

Spreadsheet software

Microsoft Excel

Configuration management software

IBM Terraform

Enterprise system management software

Splunk Enterprise

Expert system software

Ansible software

Enterprise resource planning ERP software

Management information systems MIS

Office suite software

Microsoft Office software

Network security and virtual private network VPN equipment software

Firewall software

Data base management system software

Database management systems

Computer aided design CAD software

Ghidra

Internet directory services software

Microsoft Active Directory

Cloud-based protection or security software

Qualys Cloud Platform

Cloud-based management software

Google Cloud software

Detailed Work Activities

Develop testing routines or procedures.

Analyze security of systems, network, or data.

Prepare scientific or technical reports or presentations.

Stay informed about current developments in field of specialization.

Analyze risks to minimize losses or damages.

Develop computer or information security policies or procedures.

Develop computer or information systems.

Develop organizational policies or programs.

Discuss design or technical features of products or services with technical personnel.

Evaluate characteristics of equipment or systems.

Examine records or other types of data to investigate criminal activities.

Interpret design or operational test results.

Investigate illegal or suspicious activities.

Prepare analytical reports.

Prepare technical or operational reports.

Search files, databases or reference materials to obtain needed information.

Test computer system operations to ensure proper functioning.

Test performance of electrical, electronic, mechanical, or integrated systems or equipment.

Job Zone

Job Zone Four: Considerable Preparation Needed

Most of these occupations require a four-year bachelor's degree, but some do not.

A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.

Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training.

Many of these occupations involve coordinating, supervising, managing, or training others. Examples include real estate brokers, sales managers, database administrators, graphic designers, conservation scientists, art directors, and cost estimators.

SVP Range: (7.0 to < 8.0)