# Penetration Testers

> Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.
- **Entity Type:** role
- **Schema Version:** role.v1
- **Soc Code:** 15-1299.04
- **Summary:** Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

## Aliases

- Application Security Assessor
- Application Security Hacker
- Application Security Tester
- Certified Hacker
- Certified Tester
- Consulting Advisory Tester
- Cyber Analyst
- Cyber Assessment Tester
- Cyber Assessor
- Cyber Security Engineer
- Cyber Security Tester
- Cyber Tester

## Tasks

| Text | Type | Iwa |
| --- | --- | --- |
| Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters. | n/a | 4.A.2.a.1.g |
| Collect stakeholder data to evaluate risk and to develop mitigation strategies. | n/a | 4.A.2.a.4.c |
| Conduct network and security system audits, using established criteria. | n/a | 4.A.2.a.4.l |
| Configure information systems to incorporate principles of least functionality and least access. | n/a | 4.A.2.b.2.b |
| Design security solutions to address known device vulnerabilities. | n/a | 4.A.3.b.2.f |
| Develop and execute tests that simulate the techniques of known cyber threat actors. | n/a | 4.A.1.b.2.l |
| Develop infiltration tests that exploit device vulnerabilities. | n/a | 4.A.3.b.2.f |
| Develop presentations on threat intelligence. | n/a | 4.A.3.b.6.c |
| Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests. | n/a | 4.A.3.b.2.f |
| Discuss security solutions with information technology teams or management. | n/a | 4.A.4.a.2.h |
| Document penetration test findings. | n/a | 4.A.3.b.6.c |
| Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries. | n/a | 4.A.2.a.4.l |

## Emerging Tasks


## Activities

| Name | Iwa |
| --- | --- |
| Evaluate characteristics of equipment or systems. | 4.A.2.a.1.g |
| Analyze risks to minimize losses or damages. | 4.A.2.a.4.c |
| Analyze security of systems, network, or data. | 4.A.2.a.4.l |
| Develop computer or information systems. | 4.A.2.b.2.b |
| Develop computer or information security policies or procedures. | 4.A.3.b.2.f |
| Test performance of electrical, electronic, mechanical, or integrated systems or equipment. | 4.A.1.b.2.l |
| Develop testing routines or procedures. | 4.A.3.b.2.f |
| Prepare scientific or technical reports or presentations. | 4.A.3.b.6.c |
| Discuss design or technical features of products or services with technical personnel. | 4.A.4.a.2.h |
| Prepare technical or operational reports. | 4.A.3.b.6.c |
| Interpret design or operational test results. | 4.A.2.a.4.l |
| Search files, databases or reference materials to obtain needed information. | 4.A.1.a.1.d |
| Investigate illegal or suspicious activities. | 4.A.1.a.1.c |
| Examine records or other types of data to investigate criminal activities. | 4.A.1.a.1.c |
| Stay informed about current developments in field of specialization. | 4.A.2.b.3.a |
| Test computer system operations to ensure proper functioning. | 4.A.1.b.2.h |
| Develop organizational policies or programs. | 4.A.2.b.4.a |
| Prepare analytical reports. | 4.A.3.b.6.c |

## Capabilities


## Skills

| Name | Type |
| --- | --- |
| Unix | Specialized Skill |
| Linux | Specialized Skill |
| Shell Script | Specialized Skill |
| ServiceNow | Specialized Skill |
| Microsoft Excel | Common Skill |
| Kubernetes | Specialized Skill |
| Github | Specialized Skill |
| Apple IOS | Specialized Skill |
| Nmap | Specialized Skill |
| Metasploit | Specialized Skill |
| Kali Linux | Specialized Skill |
| Wireshark | Specialized Skill |
| RESTful API | Specialized Skill |
| HP WebInspect | Specialized Skill |
| Database Management Systems | Specialized Skill |

## Tools

| Example | Category | Hot | In Demand |
| --- | --- | --- | --- |
| Amazon Web Services AWS software | Data base user interface and query software | yes | yes |
| Bash | Operating system software | yes | yes |
| C | Development environment software | yes | yes |
| C# | Object or component oriented development software | yes | yes |
| C++ | Object or component oriented development software | yes | yes |
| JavaScript | Web platform development software | yes | yes |
| Linux | Operating system software | yes | yes |
| Microsoft Active Directory | Internet directory services software | yes | yes |
| Microsoft Azure software | Development environment software | yes | yes |
| Microsoft PowerShell | Development environment software | yes | yes |
| Oracle Java | Object or component oriented development software | yes | yes |
| Python | Object or component oriented development software | yes | yes |
| Splunk Enterprise | Enterprise system management software | yes | yes |
| UNIX | Operating system software | yes | yes |
| Ansible software | Expert system software | yes | no |
| Apple iOS | Operating system software | yes | no |
| Apple macOS | Operating system software | yes | no |
| Docker | Application server software | yes | no |
| GitHub | Application server software | yes | no |
| Go | Development environment software | yes | no |
| Google Android | Operating system software | yes | no |
| IBM Terraform | Configuration management software | yes | no |
| Kubernetes | Application server software | yes | no |
| Microsoft Active Server Pages ASP | Web platform development software | yes | no |
| Microsoft Excel | Spreadsheet software | yes | no |
| Microsoft Office software | Office suite software | yes | no |
| Microsoft SQL Server | Data base user interface and query software | yes | no |
| Oracle Java 2 Platform Enterprise Edition J2EE | Development environment software | yes | no |
| Perl | Object or component oriented development software | yes | no |
| PHP | Web platform development software | yes | no |
| Ruby | Development environment software | yes | no |
| ServiceNow | Data base user interface and query software | yes | no |
| Shell script | Operating system software | yes | no |
| Structured query language SQL | Data base user interface and query software | yes | no |
| Firewall software | Network security and virtual private network VPN equipment software | no | yes |
| Kali Linux | Program testing software | no | yes |
| Metasploit | Transaction security and virus protection software | no | yes |
| MITRE ATT&CK software | Program testing software | no | yes |
| Nmap | Transaction security and virus protection software | no | yes |
| Portswigger BurP Suite | Transaction security and virus protection software | no | yes |

## Work Context


## Preparation

- **Job Zone:** 4
- **Job Zone Name:** Job Zone Four: Considerable Preparation Needed
- **Education:** Most of these occupations require a four-year bachelor's degree, but some do not.
- **Experience:** A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.
- **Svp Range:** (7.0 to < 8.0)

### Education Distribution


## Person Fit

| Name | Family | Value |
| --- | --- | --- |
| Dependability | work_style | 10 |
| Attention to Detail | work_style | 9 |
| Integrity | work_style | 8 |
| Cautiousness | work_style | 7 |
| Information Technology | specific_interest_area | 6.53 |
| Intellectual Curiosity | work_style | 6 |
| Investigative | career_interest_type | 5.19 |
| Conventional | career_interest_type | 5.18 |
| Achievement Orientation | work_style | 5 |
| Perseverance | work_style | 4 |
| Realistic | career_interest_type | 3.91 |
| Engineering | specific_interest_area | 3.09 |
| Adaptability | work_style | 3 |
| Mathematics/Statistics | specific_interest_area | 2.77 |
| Innovation | work_style | 2.58 |
| Protective Service | specific_interest_area | 2.44 |

## Related Roles

| Soc Code | Slug | Title | Tier |
| --- | --- | --- | --- |
| 15-1299.05 | role-15-1299-05 | Information Security Engineers | Primary-Short |
| 15-1212.00 | role-15-1212-00 | Information Security Analysts | Primary-Short |
| 15-1253.00 | role-15-1253-00 | Software Quality Assurance Analysts and Testers | Primary-Short |
| 15-1211.00 | role-15-1211-00 | Computer Systems Analysts | Primary-Short |
| 15-1299.08 | role-15-1299-08 | Computer Systems Engineers/Architects | Primary-Short |
| 15-1252.00 | role-15-1252-00 | Software Developers | Primary-Long |
| 17-2112.02 | role-17-2112-02 | Validation Engineers | Primary-Long |
| 15-1242.00 | role-15-1242-00 | Database Administrators | Primary-Long |
| 15-1299.07 | role-15-1299-07 | Blockchain Engineers | Primary-Long |
| 15-1231.00 | role-15-1231-00 | Computer Network Support Specialists | Primary-Long |
| 13-1199.07 | role-13-1199-07 | Security Management Specialists | Supplemental |
| 11-3013.01 | role-11-3013-01 | Security Managers | Supplemental |

## Career Clusters

| Cluster | Slug |
| --- | --- |
| Digital Technology | digital-technology |
| Public Service & Safety | public-service-safety |

## Education Level

- **Category:** Bachelor's degree

## Study Programs

| Title | Slug |
| --- | --- |
| Biological and Biomedical Sciences | biological-and-biomedical-sciences |
| Computer and Information Sciences and Support Services | computer-and-information-sciences-and-support-services |
| Health Professions and Related Programs | health-professions-and-related-programs |
| Homeland Security, Law Enforcement, Firefighting and Related Protective Services | homeland-security-law-enforcement-firefighting-and-related-protective-services |
| Multi/Interdisciplinary Studies | multi-interdisciplinary-studies |
| Physical Sciences | physical-sciences |

## Market

- **Median Wage:** 108970
- **Mean Wage:** 116700
- **Pct10Wage:** 52650
- **Pct25Wage:** 76360
- **Pct75Wage:** 147530
- **Pct90Wage:** 176800
- **Employment:** 439380
- **Area Title:** U.S.

## Industries


### Top

| Naics | Slug | Title | Level | Employment | Median Wage | Lq |
| --- | --- | --- | --- | --- | --- | --- |
| 54 | 54 | Professional, Scientific, and Technical Services | Sector | 130160 | 106200 | 4.24 |
| 51 | 51 | Information | Sector | 43000 | 126550 | 5.19 |
| 52 | 52 | Finance and Insurance | Sector | 28690 | 126080 | 1.62 |
| 55 | 55 | Management of Companies and Enterprises | Sector | 25660 | 127600 | 3.21 |
| 56 | 56 | Administrative and Support and Waste Management and Remediation Services | Sector | 24880 | 96000 | 0.97 |
| 31-33 | 31-33 | Manufacturing | Sector | 21020 | 102950 | 0.58 |
| 61 | 61 | Educational Services | Sector | 18100 | 79900 | 0.47 |
| 561320 | 561320 | Temporary Help Services | National industry | 13460 | 95780 | 1.78 |
| 42 | 42 | Wholesale Trade | Sector | 13130 | 100550 | 0.76 |
| 62 | 62 | Health Care and Social Assistance | Sector | 11030 | 83320 | 0.17 |
| 541330 | 541330 | Engineering Services | National industry | 9590 | 108370 | 2.91 |
| 48-49 | 48-49 | Transportation and Warehousing | Sector | 7000 | 65350 | 0.33 |

### Concentrated

| Naics | Slug | Title | Level | Employment | Lq |
| --- | --- | --- | --- | --- | --- |
| 541720 | 541720 | Research and Development in the Social Sciences and Humanities | National industry | 1240 | 7.16 |
| 51 | 51 | Information | Sector | 43000 | 5.19 |
| 54 | 54 | Professional, Scientific, and Technical Services | Sector | 130160 | 4.24 |
| 55 | 55 | Management of Companies and Enterprises | Sector | 25660 | 3.21 |
| 524114 | 524114 | Direct Health and Medical Insurance Carriers | National industry | 3860 | 3.02 |
| 541330 | 541330 | Engineering Services | National industry | 9590 | 2.91 |
| 561320 | 561320 | Temporary Help Services | National industry | 13460 | 1.78 |
| 52 | 52 | Finance and Insurance | Sector | 28690 | 1.62 |
- **Count:** 51

## Ai Signals


## Ai Outlook


### Index

- **Value:** 88
- **Percentile:** 93
- **Band:** High
- **Version:** ai-exposure-index-v1

#### Components

| Percentile | Source |
| --- | --- |
| 87 | openai_gpts_are_gpts |
| 88 | microsoft_working_with_ai |
- **Component Count:** 2

### Exposure

| Source | Label | Value | Percentile | Band | Note |
| --- | --- | --- | --- | --- | --- |
| eloundou_gamma | LLM task exposure, γ (OpenAI / Eloundou) | 0.9545454545454546 | 87 | High | Share of this job's tasks where a large language model plus simple tools could cut the time to do them by at least half. γ is capped at 1.0 and many jobs reach that ceiling, so treat a top score as 'in the top group', not a precise rank. |
| microsoft_applicability | AI assistant applicability (Microsoft) | 0.29778584910303174 | 88 | High | How applicable today's AI assistants are to this job's activities, measured from real Microsoft Copilot conversations. Applicability is not the same as replacement. |

### Eloundou

- **Alpha:** 0.6363636363636364
- **Beta:** 0.7954545454545455
- **Gamma:** 0.9545454545454546

### Usage Tasks


### Bls

- **Growth Percent:** 8.2
- **Growth Percentile:** 88
- **Direction:** Growing fast
- **Annual Openings Thousands:** 31.3
- **Annual Openings Percentile:** 84
- **Employment2024Thousands:** 472
- **Employment2034Thousands:** 510.5

### Sources

| Source | Version |
| --- | --- |
| bls_employment_projections | 2024-2034 |
| microsoft_working_with_ai | working-with-ai |
| openai_gpts_are_gpts | gpts-are-gpts |

## Counts

- **Tasks:** 22
- **Skills:** 15
- **Capabilities:** 0
- **Tools:** 67
- **Related Roles:** 20

## Source

- **Dataset:** gold.onet_role_starter_surface
- **Version:** 30.3
- **Generated At:** 2026-06-02T21:00:32.945303+00:00
- **Content Hash:** 82413933b80b5b4d