entityType = "role"
schemaVersion = "role.v1"
slug = "role-15-1299-04"
socCode = "15-1299.04"
title = "Penetration Testers"
summary = "Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security."
aliases = ["Application Security Assessor", "Application Security Hacker", "Application Security Tester", "Certified Hacker", "Certified Tester", "Consulting Advisory Tester", "Cyber Analyst", "Cyber Assessment Tester", "Cyber Assessor", "Cyber Security Engineer", "Cyber Security Tester", "Cyber Tester"]
emergingTasks = []
capabilities = []
workContext = []
aiSignals = []

[preparation]
jobZone = "4"
jobZoneName = "Job Zone Four: Considerable Preparation Needed"
education = "Most of these occupations require a four-year bachelor's degree, but some do not."
experience = "A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified."
svpRange = "(7.0 to < 8.0)"
educationDistribution = []

[educationLevel]
category = "Bachelor's degree"
slug = "bachelor-s-degree"

[market]
medianWage = 108970
meanWage = 116700
pct10Wage = 52650
pct25Wage = 76360
pct75Wage = 147530
pct90Wage = 176800
employment = 439380
areaTitle = "U.S."

[industries]
count = 51

[[industries.top]]
naics = "54"
slug = "54"
title = "Professional, Scientific, and Technical Services"
level = "Sector"
employment = 130160
medianWage = 106200
lq = 4.24

[[industries.top]]
naics = "51"
slug = "51"
title = "Information"
level = "Sector"
employment = 43000
medianWage = 126550
lq = 5.19

[[industries.top]]
naics = "52"
slug = "52"
title = "Finance and Insurance"
level = "Sector"
employment = 28690
medianWage = 126080
lq = 1.62

[[industries.top]]
naics = "55"
slug = "55"
title = "Management of Companies and Enterprises"
level = "Sector"
employment = 25660
medianWage = 127600
lq = 3.21

[[industries.top]]
naics = "56"
slug = "56"
title = "Administrative and Support and Waste Management and Remediation Services"
level = "Sector"
employment = 24880
medianWage = 96000
lq = 0.97

[[industries.top]]
naics = "31-33"
slug = "31-33"
title = "Manufacturing"
level = "Sector"
employment = 21020
medianWage = 102950
lq = 0.58

[[industries.top]]
naics = "61"
slug = "61"
title = "Educational Services"
level = "Sector"
employment = 18100
medianWage = 79900
lq = 0.47

[[industries.top]]
naics = "561320"
slug = "561320"
title = "Temporary Help Services"
level = "National industry"
employment = 13460
medianWage = 95780
lq = 1.78

[[industries.top]]
naics = "42"
slug = "42"
title = "Wholesale Trade"
level = "Sector"
employment = 13130
medianWage = 100550
lq = 0.76

[[industries.top]]
naics = "62"
slug = "62"
title = "Health Care and Social Assistance"
level = "Sector"
employment = 11030
medianWage = 83320
lq = 0.17

[[industries.top]]
naics = "541330"
slug = "541330"
title = "Engineering Services"
level = "National industry"
employment = 9590
medianWage = 108370
lq = 2.91

[[industries.top]]
naics = "48-49"
slug = "48-49"
title = "Transportation and Warehousing"
level = "Sector"
employment = 7000
medianWage = 65350
lq = 0.33

[[industries.concentrated]]
naics = "541720"
slug = "541720"
title = "Research and Development in the Social Sciences and Humanities"
level = "National industry"
employment = 1240
lq = 7.16

[[industries.concentrated]]
naics = "51"
slug = "51"
title = "Information"
level = "Sector"
employment = 43000
lq = 5.19

[[industries.concentrated]]
naics = "54"
slug = "54"
title = "Professional, Scientific, and Technical Services"
level = "Sector"
employment = 130160
lq = 4.24

[[industries.concentrated]]
naics = "55"
slug = "55"
title = "Management of Companies and Enterprises"
level = "Sector"
employment = 25660
lq = 3.21

[[industries.concentrated]]
naics = "524114"
slug = "524114"
title = "Direct Health and Medical Insurance Carriers"
level = "National industry"
employment = 3860
lq = 3.02

[[industries.concentrated]]
naics = "541330"
slug = "541330"
title = "Engineering Services"
level = "National industry"
employment = 9590
lq = 2.91

[[industries.concentrated]]
naics = "561320"
slug = "561320"
title = "Temporary Help Services"
level = "National industry"
employment = 13460
lq = 1.78

[[industries.concentrated]]
naics = "52"
slug = "52"
title = "Finance and Insurance"
level = "Sector"
employment = 28690
lq = 1.62

[aiOutlook]
usageTasks = []

[aiOutlook.index]
value = 88
percentile = 93
band = "High"
version = "ai-exposure-index-v1"
componentCount = 2

[[aiOutlook.index.components]]
percentile = 87
source = "openai_gpts_are_gpts"

[[aiOutlook.index.components]]
percentile = 88
source = "microsoft_working_with_ai"

[aiOutlook.eloundou]
alpha = 0.6363636363636364
beta = 0.7954545454545455
gamma = 0.9545454545454546

[aiOutlook.bls]
growthPercent = 8.2
growthPercentile = 88
direction = "Growing fast"
annualOpeningsThousands = 31.3
annualOpeningsPercentile = 84
employment2024Thousands = 472
employment2034Thousands = 510.5

[[aiOutlook.exposure]]
source = "eloundou_gamma"
label = "LLM task exposure, γ (OpenAI / Eloundou)"
value = 0.9545454545454546
percentile = 87
band = "High"
note = "Share of this job's tasks where a large language model plus simple tools could cut the time to do them by at least half. γ is capped at 1.0 and many jobs reach that ceiling, so treat a top score as 'in the top group', not a precise rank."

[[aiOutlook.exposure]]
source = "microsoft_applicability"
label = "AI assistant applicability (Microsoft)"
value = 0.29778584910303174
percentile = 88
band = "High"
note = "How applicable today's AI assistants are to this job's activities, measured from real Microsoft Copilot conversations. Applicability is not the same as replacement."

[[aiOutlook.sources]]
source = "bls_employment_projections"
version = "2024-2034"

[[aiOutlook.sources]]
source = "microsoft_working_with_ai"
version = "working-with-ai"

[[aiOutlook.sources]]
source = "openai_gpts_are_gpts"
version = "gpts-are-gpts"

[counts]
tasks = 22
skills = 15
capabilities = 0
tools = 67
relatedRoles = 20

[source]
dataset = "gold.onet_role_starter_surface"
version = "30.3"
generatedAt = "2026-06-02T21:00:32.945303+00:00"
contentHash = "82413933b80b5b4d"

[[tasks]]
text = "Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters."
type = "n/a"
iwa = "4.A.2.a.1.g"

[[tasks]]
text = "Collect stakeholder data to evaluate risk and to develop mitigation strategies."
type = "n/a"
iwa = "4.A.2.a.4.c"

[[tasks]]
text = "Conduct network and security system audits, using established criteria."
type = "n/a"
iwa = "4.A.2.a.4.l"

[[tasks]]
text = "Configure information systems to incorporate principles of least functionality and least access."
type = "n/a"
iwa = "4.A.2.b.2.b"

[[tasks]]
text = "Design security solutions to address known device vulnerabilities."
type = "n/a"
iwa = "4.A.3.b.2.f"

[[tasks]]
text = "Develop and execute tests that simulate the techniques of known cyber threat actors."
type = "n/a"
iwa = "4.A.1.b.2.l"

[[tasks]]
text = "Develop infiltration tests that exploit device vulnerabilities."
type = "n/a"
iwa = "4.A.3.b.2.f"

[[tasks]]
text = "Develop presentations on threat intelligence."
type = "n/a"
iwa = "4.A.3.b.6.c"

[[tasks]]
text = "Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests."
type = "n/a"
iwa = "4.A.3.b.2.f"

[[tasks]]
text = "Discuss security solutions with information technology teams or management."
type = "n/a"
iwa = "4.A.4.a.2.h"

[[tasks]]
text = "Document penetration test findings."
type = "n/a"
iwa = "4.A.3.b.6.c"

[[tasks]]
text = "Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries."
type = "n/a"
iwa = "4.A.2.a.4.l"

[[activities]]
name = "Evaluate characteristics of equipment or systems."
iwa = "4.A.2.a.1.g"

[[activities]]
name = "Analyze risks to minimize losses or damages."
iwa = "4.A.2.a.4.c"

[[activities]]
name = "Analyze security of systems, network, or data."
iwa = "4.A.2.a.4.l"

[[activities]]
name = "Develop computer or information systems."
iwa = "4.A.2.b.2.b"

[[activities]]
name = "Develop computer or information security policies or procedures."
iwa = "4.A.3.b.2.f"

[[activities]]
name = "Test performance of electrical, electronic, mechanical, or integrated systems or equipment."
iwa = "4.A.1.b.2.l"

[[activities]]
name = "Develop testing routines or procedures."
iwa = "4.A.3.b.2.f"

[[activities]]
name = "Prepare scientific or technical reports or presentations."
iwa = "4.A.3.b.6.c"

[[activities]]
name = "Discuss design or technical features of products or services with technical personnel."
iwa = "4.A.4.a.2.h"

[[activities]]
name = "Prepare technical or operational reports."
iwa = "4.A.3.b.6.c"

[[activities]]
name = "Interpret design or operational test results."
iwa = "4.A.2.a.4.l"

[[activities]]
name = "Search files, databases or reference materials to obtain needed information."
iwa = "4.A.1.a.1.d"

[[activities]]
name = "Investigate illegal or suspicious activities."
iwa = "4.A.1.a.1.c"

[[activities]]
name = "Examine records or other types of data to investigate criminal activities."
iwa = "4.A.1.a.1.c"

[[activities]]
name = "Stay informed about current developments in field of specialization."
iwa = "4.A.2.b.3.a"

[[activities]]
name = "Test computer system operations to ensure proper functioning."
iwa = "4.A.1.b.2.h"

[[activities]]
name = "Develop organizational policies or programs."
iwa = "4.A.2.b.4.a"

[[activities]]
name = "Prepare analytical reports."
iwa = "4.A.3.b.6.c"

[[skills]]
name = "Unix"
type = "Specialized Skill"

[[skills]]
name = "Linux"
type = "Specialized Skill"

[[skills]]
name = "Shell Script"
type = "Specialized Skill"

[[skills]]
name = "ServiceNow"
type = "Specialized Skill"

[[skills]]
name = "Microsoft Excel"
type = "Common Skill"

[[skills]]
name = "Kubernetes"
type = "Specialized Skill"

[[skills]]
name = "Github"
type = "Specialized Skill"

[[skills]]
name = "Apple IOS"
type = "Specialized Skill"

[[skills]]
name = "Nmap"
type = "Specialized Skill"

[[skills]]
name = "Metasploit"
type = "Specialized Skill"

[[skills]]
name = "Kali Linux"
type = "Specialized Skill"

[[skills]]
name = "Wireshark"
type = "Specialized Skill"

[[skills]]
name = "RESTful API"
type = "Specialized Skill"

[[skills]]
name = "HP WebInspect"
type = "Specialized Skill"

[[skills]]
name = "Database Management Systems"
type = "Specialized Skill"

[[tools]]
example = "Amazon Web Services AWS software"
category = "Data base user interface and query software"
hot = true
inDemand = true

[[tools]]
example = "Bash"
category = "Operating system software"
hot = true
inDemand = true

[[tools]]
example = "C"
category = "Development environment software"
hot = true
inDemand = true

[[tools]]
example = "C#"
category = "Object or component oriented development software"
hot = true
inDemand = true

[[tools]]
example = "C++"
category = "Object or component oriented development software"
hot = true
inDemand = true

[[tools]]
example = "JavaScript"
category = "Web platform development software"
hot = true
inDemand = true

[[tools]]
example = "Linux"
category = "Operating system software"
hot = true
inDemand = true

[[tools]]
example = "Microsoft Active Directory"
category = "Internet directory services software"
hot = true
inDemand = true

[[tools]]
example = "Microsoft Azure software"
category = "Development environment software"
hot = true
inDemand = true

[[tools]]
example = "Microsoft PowerShell"
category = "Development environment software"
hot = true
inDemand = true

[[tools]]
example = "Oracle Java"
category = "Object or component oriented development software"
hot = true
inDemand = true

[[tools]]
example = "Python"
category = "Object or component oriented development software"
hot = true
inDemand = true

[[tools]]
example = "Splunk Enterprise"
category = "Enterprise system management software"
hot = true
inDemand = true

[[tools]]
example = "UNIX"
category = "Operating system software"
hot = true
inDemand = true

[[tools]]
example = "Ansible software"
category = "Expert system software"
hot = true
inDemand = false

[[tools]]
example = "Apple iOS"
category = "Operating system software"
hot = true
inDemand = false

[[tools]]
example = "Apple macOS"
category = "Operating system software"
hot = true
inDemand = false

[[tools]]
example = "Docker"
category = "Application server software"
hot = true
inDemand = false

[[tools]]
example = "GitHub"
category = "Application server software"
hot = true
inDemand = false

[[tools]]
example = "Go"
category = "Development environment software"
hot = true
inDemand = false

[[tools]]
example = "Google Android"
category = "Operating system software"
hot = true
inDemand = false

[[tools]]
example = "IBM Terraform"
category = "Configuration management software"
hot = true
inDemand = false

[[tools]]
example = "Kubernetes"
category = "Application server software"
hot = true
inDemand = false

[[tools]]
example = "Microsoft Active Server Pages ASP"
category = "Web platform development software"
hot = true
inDemand = false

[[tools]]
example = "Microsoft Excel"
category = "Spreadsheet software"
hot = true
inDemand = false

[[tools]]
example = "Microsoft Office software"
category = "Office suite software"
hot = true
inDemand = false

[[tools]]
example = "Microsoft SQL Server"
category = "Data base user interface and query software"
hot = true
inDemand = false

[[tools]]
example = "Oracle Java 2 Platform Enterprise Edition J2EE"
category = "Development environment software"
hot = true
inDemand = false

[[tools]]
example = "Perl"
category = "Object or component oriented development software"
hot = true
inDemand = false

[[tools]]
example = "PHP"
category = "Web platform development software"
hot = true
inDemand = false

[[tools]]
example = "Ruby"
category = "Development environment software"
hot = true
inDemand = false

[[tools]]
example = "ServiceNow"
category = "Data base user interface and query software"
hot = true
inDemand = false

[[tools]]
example = "Shell script"
category = "Operating system software"
hot = true
inDemand = false

[[tools]]
example = "Structured query language SQL"
category = "Data base user interface and query software"
hot = true
inDemand = false

[[tools]]
example = "Firewall software"
category = "Network security and virtual private network VPN equipment software"
hot = false
inDemand = true

[[tools]]
example = "Kali Linux"
category = "Program testing software"
hot = false
inDemand = true

[[tools]]
example = "Metasploit"
category = "Transaction security and virus protection software"
hot = false
inDemand = true

[[tools]]
example = "MITRE ATT&CK software"
category = "Program testing software"
hot = false
inDemand = true

[[tools]]
example = "Nmap"
category = "Transaction security and virus protection software"
hot = false
inDemand = true

[[tools]]
example = "Portswigger BurP Suite"
category = "Transaction security and virus protection software"
hot = false
inDemand = true

[[personFit]]
name = "Dependability"
family = "work_style"
value = 10

[[personFit]]
name = "Attention to Detail"
family = "work_style"
value = 9

[[personFit]]
name = "Integrity"
family = "work_style"
value = 8

[[personFit]]
name = "Cautiousness"
family = "work_style"
value = 7

[[personFit]]
name = "Information Technology"
family = "specific_interest_area"
value = 6.53

[[personFit]]
name = "Intellectual Curiosity"
family = "work_style"
value = 6

[[personFit]]
name = "Investigative"
family = "career_interest_type"
value = 5.19

[[personFit]]
name = "Conventional"
family = "career_interest_type"
value = 5.18

[[personFit]]
name = "Achievement Orientation"
family = "work_style"
value = 5

[[personFit]]
name = "Perseverance"
family = "work_style"
value = 4

[[personFit]]
name = "Realistic"
family = "career_interest_type"
value = 3.91

[[personFit]]
name = "Engineering"
family = "specific_interest_area"
value = 3.09

[[personFit]]
name = "Adaptability"
family = "work_style"
value = 3

[[personFit]]
name = "Mathematics/Statistics"
family = "specific_interest_area"
value = 2.77

[[personFit]]
name = "Innovation"
family = "work_style"
value = 2.58

[[personFit]]
name = "Protective Service"
family = "specific_interest_area"
value = 2.44

[[relatedRoles]]
socCode = "15-1299.05"
slug = "role-15-1299-05"
title = "Information Security Engineers"
tier = "Primary-Short"

[[relatedRoles]]
socCode = "15-1212.00"
slug = "role-15-1212-00"
title = "Information Security Analysts"
tier = "Primary-Short"

[[relatedRoles]]
socCode = "15-1253.00"
slug = "role-15-1253-00"
title = "Software Quality Assurance Analysts and Testers"
tier = "Primary-Short"

[[relatedRoles]]
socCode = "15-1211.00"
slug = "role-15-1211-00"
title = "Computer Systems Analysts"
tier = "Primary-Short"

[[relatedRoles]]
socCode = "15-1299.08"
slug = "role-15-1299-08"
title = "Computer Systems Engineers/Architects"
tier = "Primary-Short"

[[relatedRoles]]
socCode = "15-1252.00"
slug = "role-15-1252-00"
title = "Software Developers"
tier = "Primary-Long"

[[relatedRoles]]
socCode = "17-2112.02"
slug = "role-17-2112-02"
title = "Validation Engineers"
tier = "Primary-Long"

[[relatedRoles]]
socCode = "15-1242.00"
slug = "role-15-1242-00"
title = "Database Administrators"
tier = "Primary-Long"

[[relatedRoles]]
socCode = "15-1299.07"
slug = "role-15-1299-07"
title = "Blockchain Engineers"
tier = "Primary-Long"

[[relatedRoles]]
socCode = "15-1231.00"
slug = "role-15-1231-00"
title = "Computer Network Support Specialists"
tier = "Primary-Long"

[[relatedRoles]]
socCode = "13-1199.07"
slug = "role-13-1199-07"
title = "Security Management Specialists"
tier = "Supplemental"

[[relatedRoles]]
socCode = "11-3013.01"
slug = "role-11-3013-01"
title = "Security Managers"
tier = "Supplemental"

[[careerClusters]]
cluster = "Digital Technology"
slug = "digital-technology"

[[careerClusters]]
cluster = "Public Service & Safety"
slug = "public-service-safety"

[[studyPrograms]]
title = "Biological and Biomedical Sciences"
slug = "biological-and-biomedical-sciences"

[[studyPrograms]]
title = "Computer and Information Sciences and Support Services"
slug = "computer-and-information-sciences-and-support-services"

[[studyPrograms]]
title = "Health Professions and Related Programs"
slug = "health-professions-and-related-programs"

[[studyPrograms]]
title = "Homeland Security, Law Enforcement, Firefighting and Related Protective Services"
slug = "homeland-security-law-enforcement-firefighting-and-related-protective-services"

[[studyPrograms]]
title = "Multi/Interdisciplinary Studies"
slug = "multi-interdisciplinary-studies"

[[studyPrograms]]
title = "Physical Sciences"
slug = "physical-sciences"
