BlissPoint Analytics

Occupation AtlasPenetration Testers

O*NET · 15-1299.04

Penetration Testers

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

Also called Application Security Assessor · Application Security Hacker · Application Security Tester · Certified Tester · Cyber Assessment Tester · Cyber Assessor · Cyber Engineer · Cyber Security Engineer
30 more

Cyber Security Tester · Cyber Systems Engineer · Cybersecurity Engineer (Cyber Engineer) · Cybersecurity Specialist · Embedded Tester · Hardware Hacker · Information Security Assessor · Network Exploitation Analyst · Network Security Tester · Penetration Testing Consultant · Risk Tester · Security Application Tester · Security Architect · Security Assessment Tester · Security Automation Tester · Security Consultant · Security Consulting Tester · Security Control Assessor · Security Engineer · Security Tester · System Vulnerability Analyst · Systems Security Tester · Tester · Threat Hunter · Vulnerability Analyst · Vulnerability Assessment Analyst · Vulnerability Assessor · Vulnerability Management Analyst · Vulnerability Management Engineer · Vulnerability Researcher

Job Zone 4 — Considerable Preparation NeededHolland code ICR35 skills on file

Compare with another occupationCompare with Digital Forensics Analysts

Job Zone

  1. 1
  2. 2
  3. 3
  4. 4
  5. 5

Zone 4: Considerable Preparation Needed

Considerable preparation. Usually a bachelor's degree plus several years of work-related experience, knowledge, or training.

Job Zone is O*NET's rating of how much education, experience and training an occupation typically needs — a property of the work, not of anyone doing it.

Occupational interest profile

ICRInvestigative · Conventional · Realistic — the three strongest interests, in order

  • I Investigative5.19
  • C Conventional5.18
  • R Realistic3.91
  • E Enterprising2.10
  • S Social1.99
  • A Artistic1.31

RIASEC (Holland) interests on O*NET's 0–7 scale: what the work draws on, not what any individual prefers. Hover a row for what each dimension means.

Education and experience

The education level respondents say the job requires, and the most common answer for experience and training.

  • High School Diploma or the equivalent15%
  • Post-Secondary Certificate20%
  • Some College Courses10%
  • Associate's Degree or other 2-year degree10%
  • Bachelor's Degree40%
  • Master's Degree5%
Related work experience
Over 2 years, up to and including 4 years (45%)
On-site or in-plant training
Over 1 month, up to and including 3 months (35%)
On-the-job training
Over 1 month, up to and including 3 months (35%)

Typically associated skills

All 35 O*NET skills, most important first. Importance (1–5) says how much a skill matters here; level (0–7) says how much of it the work calls for, with O*NET's example of a nearby level. Neither is a proficiency rating of a person.

  • Critical Thinkingbasic4.44.4Level 4 looks like: Evaluate customer complaints and determine appropriate responses
  • Reading Comprehensionbasic4.04.5Level 4 looks like: Understand an email from management describing new personnel policies
  • Writingbasic4.04.1Level 4 looks like: Write an email to staff outlining new directives
  • Programming3.94.1Level 4 looks like: Write a statistical analysis program to analyze demographic data
  • Active Listeningbasic3.94.0Level 4 looks like: Answer inquiries regarding credit references
  • Complex Problem Solving3.93.9Level 4 looks like: Redesign a floor layout to take advantage of new manufacturing techniques
  • Active Learningbasic3.64.1Level 4 looks like: Determine the impact of new menu changes on a restaurant's purchasing requirements
  • Systems Evaluation3.64.1Level 4 looks like: Identify the reasons why a client might be unhappy with a product
  • Judgment and Decision Making3.54.1Level 4 looks like: Evaluate a loan application for degree of risk
  • Monitoringbasic3.53.9Level 4 looks like: Monitor a meeting and revise the agenda to ensure important topics are discussed
  • Systems Analysis3.53.8Level 4 looks like: Determine how a new piece of equipment will affect production rates
  • Speakingbasic3.43.9Level 4 looks like: Interview applicants to obtain personal and work history
Show the other 23
  • Quality Control Analysis3.13.4Level 4 looks like: Assess new parts for precision and accuracy to specifications
  • Time Management3.03.0Level 2 looks like: Keep a monthly calendar of appointments
  • Learning Strategiesbasic2.93.4Level 4 looks like: Identify an alternative approach to help trainees who are having difficulties
  • Coordination2.93.0Level 2 looks like: Schedule appointments for a medical clinic
  • Persuasion2.83.0Level 2 looks like: Solicit donations for a charity
  • Social Perceptiveness2.83.0Level 2 looks like: Notice that customers are angry because they have been waiting too long
  • Instructing2.62.6Level 2 looks like: Instruct a new employee in the use of a timekeeping system
  • Service Orientation2.62.6Level 2 looks like: Ask customers if they would like a cup of coffee
  • Mathematicsbasic2.52.8Level 2 looks like: Count the amount of change to be given to a customer
  • Troubleshooting2.42.4Level 2 looks like: Identify the source of a leak by looking under a machine
  • Operations Monitoring2.42.1Level 2 looks like: Monitor completion times while running a computer program
  • Negotiation2.32.4Level 2 looks like: Present justification to a manager for altering a work schedule
  • Operations Analysis2.11.8Level 2 looks like: Select a printer for an office
  • Management of Personnel Resources2.02.0Level 2 looks like: Encourage a coworker who is having difficulty finishing a project
  • Technology Design1.91.1Level 2 looks like: Adjust exercise equipment for use by a customer
  • Equipment Maintenance1.81.0Level 2 looks like: Add oil to an engine as indicated by a warning light
  • Repairing1.61.0Level 2 looks like: Tighten a screw to get a door to close properly
  • Equipment Selection1.60.8
  • Sciencebasic1.50.9
  • Management of Financial Resources1.40.5
  • Management of Material Resources1.3—
  • Operation and Control1.3—
  • Installation1.0—

Tasks

22 core

What people in this occupation do, as O*NET records it, core tasks first by importance (1–5).

  1. Document penetration test findings.4.8
  2. Identify security system weaknesses, using penetration tests.4.7
  3. Gather cyber intelligence to identify vulnerabilities.4.6
  4. Write audit reports to communicate technical and procedural findings and recommend solutions.4.6
  5. Keep up with new penetration testing tools and methods.4.5
  6. Maintain up-to-date knowledge of hacking trends.4.5
  7. Conduct network and security system audits, using established criteria.4.4
  8. Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.4.4
  9. Identify new threat tactics, techniques, or procedures used by cyber threat actors.4.4
  10. Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.4.4
  11. Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.4.3
  12. Develop and execute tests that simulate the techniques of known cyber threat actors.4.1
Show the other 10
  1. Discuss security solutions with information technology teams or management.4.1
  2. Prepare and submit reports describing the results of security fixes.4.1
  3. Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.3.9
  4. Collect stakeholder data to evaluate risk and to develop mitigation strategies.3.9
  5. Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.3.9
  6. Update corporate policies to improve cyber security.3.9
  7. Design security solutions to address known device vulnerabilities.3.8
  8. Develop infiltration tests that exploit device vulnerabilities.3.8
  9. Configure information systems to incorporate principles of least functionality and least access.3.4
  10. Develop presentations on threat intelligence.3.3

Knowledge

Bodies of knowledge the work draws on.

  • Computers and Electronics5.06.6Level 7 looks like: Create a program to scan a computer for viruses
  • Telecommunications4.25.2Level 4 looks like: Install a wireless internet router
  • Engineering and Technology4.05.1Level 4 looks like: Design a custom office chair
  • Customer and Personal Service3.84.3Level 4 looks like: Be responsible for 10 children at daycare
  • English Language3.84.2Level 4 looks like: Edit an article for a news website
  • Law and Government3.43.6Level 4 looks like: Prepare documents and title papers for the purchase of a new house
  • Administration and Management3.23.9Level 4 looks like: Monitor progress of a project to ensure timely completion
  • Education and Training3.24.4Level 4 looks like: Lead a quality improvement seminar
Show all 33
  • Administrative3.14.4Level 4 looks like: Type 30 words per minute
  • Communications and Media3.13.3Level 4 looks like: Host a music radio show
  • Mathematics3.14.0Level 4 looks like: Analyze data to determine areas with the highest sales
  • Public Safety and Security3.13.6Level 4 looks like: Inspect a building site for safety violations
  • Psychology2.93.6Level 4 looks like: Understand the impact of alcohol on human responses
  • Design2.73.6Level 4 looks like: Design plans for remodeling a kitchen
  • Personnel and Human Resources2.11.8Level 1 looks like: Fill out a medical claim form
  • Production and Processing2.12.1Level 1 looks like: Put a computer back into its packing materials
  • Sales and Marketing2.12.2Level 1 looks like: Sell cakes at a bake sale
  • Sociology and Anthropology2.11.9Level 1 looks like: Identify two cultures in a story as being different
  • Economics and Accounting1.91.3Level 1 looks like: Answer billing questions from credit card customers
  • Foreign Language1.81.4Level 1 looks like: Say "please" and "thank you" in a foreign language
  • Mechanical1.81.1Level 1 looks like: Replace the filters in a furnace
  • Geography1.51.3Level 1 looks like: Know the capital of the United States
  • Philosophy and Theology1.5—
  • Physics1.50.9Level 1 looks like: Use a crowbar to pry open a box
  • History and Archeology1.40.6Level 1 looks like: Take a class in US history
  • Transportation1.30.6Level 1 looks like: Ride a train to work
  • Biology1.2—
  • Building and Construction1.2—
  • Chemistry1.2—
  • Medicine and Dentistry1.1—
  • Therapy and Counseling1.1—
  • Fine Arts1.0—
  • Food Production1.0—

Abilities

Enduring capacities the work calls for.

  • Inductive Reasoning4.44.5Level 4 looks like: Determine the prime suspect based on crime scene evidence
  • Written Expression4.34.4Level 4 looks like: Write a job recommendation for a subordinate
  • Deductive Reasoning4.14.6Level 5 looks like: Decide what factors to consider in selecting stocks
  • Problem Sensitivity4.14.4Level 4 looks like: Notice from a subtle difference in a client's mood that something is bothering them
  • Oral Comprehension4.04.6Level 4 looks like: Understand a coach's oral instructions for a sport
  • Written Comprehension4.04.5Level 4 looks like: Understand an apartment lease
  • Fluency of Ideas3.94.1Level 4 looks like: Think of as many ideas as possible for the name of a new company
  • Information Ordering3.94.0Level 2 looks like: Follow the correct steps to make change
Show all 52
  • Oral Expression3.94.5Level 4 looks like: Give instructions to a lost motorist
  • Near Vision3.83.8
  • Category Flexibility3.63.8Level 3 looks like: Classify flowers according to size, color, and smell
  • Originality3.64.0Level 4 looks like: Redesign job tasks to be interesting for employees
  • Speech Clarity3.43.1Level 4 looks like: Make stadium-wide announcements during a sporting event
  • Selective Attention3.13.1Level 4 looks like: Watch security monitors for intruders throughout the night shift
  • Speech Recognition3.03.0Level 2 looks like: Recognize the voice of a coworker
  • Flexibility of Closure2.93.0Level 2 looks like: Detect that your phone is ringing while at a concert
  • Perceptual Speed2.92.9Level 2 looks like: Sort mail according to ZIP codes with no time pressure
  • Speed of Closure2.93.3Level 3 looks like: Recognize a song after hearing only the first few notes
  • Mathematical Reasoning2.63.0Level 4 looks like: Decide how to calculate profits to determine the amounts of yearly bonuses
  • Number Facility2.52.8Level 3 looks like: Calculate a discounted price
  • Far Vision2.42.4Level 2 looks like: Read a roadside billboard
  • Visualization2.42.4Level 2 looks like: Imagine how to place paper in a printer so that the letterhead comes out on top
  • Memorization2.12.1Level 1 looks like: Remember the number on your bus to be sure you get back on the right one
  • Time Sharing2.12.1Level 2 looks like: Listen to music while entering numbers into a spreadsheet
  • Trunk Strength2.11.6Level 2 looks like: Sit up in an office chair
  • Wrist-Finger Speed2.11.5Level 2 looks like: Use a screwdriver to twist in a screw
  • Auditory Attention2.01.5Level 2 looks like: Listen to a lecture while people nearby are talking
  • Arm-Hand Steadiness1.91.1Level 2 looks like: Light a candle
  • Finger Dexterity1.91.3Level 2 looks like: Put coins in a parking meter
  • Control Precision1.81.0Level 2 looks like: Adjust a room light with a dimmer switch
  • Manual Dexterity1.81.1Level 1 looks like: Screw a light bulb into a light socket
  • Visual Color Discrimination1.81.5Level 1 looks like: Separate laundry into colors and whites
  • Depth Perception1.60.9
  • Hearing Sensitivity1.61.3Level 2 looks like: Notice a doorbell ringing
  • Dynamic Strength1.50.5
  • Extent Flexibility1.40.5
  • Peripheral Vision1.4—
  • Dynamic Flexibility1.3—
  • Night Vision1.3—
  • Sound Localization1.3—
  • Spatial Orientation1.3—
  • Explosive Strength1.0—
  • Glare Sensitivity1.0—
  • Gross Body Coordination1.0—
  • Gross Body Equilibrium1.0—
  • Multilimb Coordination1.0—
  • Rate Control1.0—
  • Reaction Time1.0—
  • Response Orientation1.0—
  • Speed of Limb Movement1.0—
  • Stamina1.0—
  • Static Strength1.0—

Work activities

Kinds of activity the work is made of.

  • Working with Computers5.06.4Level 7 looks like: Set up a new computer system for a large multinational company
  • Documenting/Recording Information4.75.2Level 4 looks like: Document the results of a crime scene investigation
  • Evaluating Information to Determine Compliance with Standards4.65.3Level 4 looks like: Evaluate a complicated insurance claim for compliance with policy terms
  • Getting Information4.65.4Level 4 looks like: Review a budget
  • Making Decisions and Solving Problems4.65.3Level 4 looks like: Select the location for a major retail store
  • Updating and Using Relevant Knowledge4.56.1Level 7 looks like: Learn information related to a complex and rapidly changing technology
  • Analyzing Data or Information4.45.4Level 4 looks like: Determine the interest cost to finance a new building
  • Processing Information4.45.7
Show all 41
  • Interpreting the Meaning of Information for Others4.35.3Level 4 looks like: Interpret how foreign tax laws apply to U.S. exports
  • Thinking Creatively4.35.6
  • Communicating with Supervisors, Peers, or Subordinates4.25.2Level 4 looks like: Report the results of a sales meeting to a supervisor
  • Identifying Objects, Actions, and Events4.25.4Level 4 looks like: Judge the suitability of food products for an event
  • Organizing, Planning, and Prioritizing Work4.15.1Level 4 looks like: Plan and adjust a personal to-do list according to changing demands
  • Communicating with People Outside the Organization4.04.8Level 4 looks like: Present information to potential clients about available services
  • Providing Consultation and Advice to Others3.84.8Level 4 looks like: Recommend a new software package to increase operational efficiency
  • Monitoring Processes, Materials, or Surroundings3.74.4Level 4 looks like: Test electrical circuits
  • Developing Objectives and Strategies3.64.1Level 4 looks like: Develop the plan to complete the merger of two organizations over a 3-year period
  • Judging the Qualities of Objects, Services, or People3.54.0Level 4 looks like: Determine the value of property lost in a fire
  • Scheduling Work and Activities3.54.1Level 4 looks like: Prepare the work schedule for salesclerks in a large retail store
  • Establishing and Maintaining Interpersonal Relationships3.44.7Level 4 looks like: Maintain good working relationships with almost all coworkers and clients
  • Estimating the Quantifiable Characteristics of Products, Events, or Information3.43.7Level 4 looks like: Estimate the time required to evacuate a city in the event of a major disaster
  • Training and Teaching Others3.44.4Level 4 looks like: Teach a social sciences course to high school students
  • Performing Administrative Activities3.33.5Level 4 looks like: Complete tax forms for a small business
  • Coaching and Developing Others3.24.0Level 4 looks like: Provide on-the-job training for administrative workers
  • Developing and Building Teams3.03.3Level 4 looks like: Lead an assembly team in an automobile plant
  • Coordinating the Work and Activities of Others2.93.7Level 4 looks like: Organize the cleanup crew after a major sporting event
  • Guiding, Directing, and Motivating Subordinates2.83.5Level 4 looks like: Manage a small team of employees in a dynamic workplace
  • Drafting, Laying Out, and Specifying Technical Devices, Parts, and Equipment2.72.8
  • Repairing and Maintaining Electronic Equipment2.73.6Level 4 looks like: Make repairs by removing and replacing circuit boards
  • Inspecting Equipment, Structures, or Materials2.62.6
  • Resolving Conflicts and Negotiating with Others2.52.6
  • Selling or Influencing Others2.52.9
  • Monitoring and Controlling Resources2.42.8
  • Controlling Machines and Processes2.32.4Level 1 looks like: Operate a cash register
  • Assisting and Caring for Others2.01.9Level 1 looks like: Help a coworker complete an assignment
  • Performing for or Working Directly with the Public2.02.0Level 1 looks like: Check tickets at a concert
  • Repairing and Maintaining Mechanical Equipment1.81.7Level 1 looks like: Make simple, external adjustments to a door hinge with ordinary hand tools
  • Handling and Moving Objects1.71.4Level 1 looks like: Change settings on copy machines
  • Performing General Physical Activities1.71.4Level 1 looks like: Walk between workstations in a small office
  • Staffing Organizational Units1.71.8Level 1 looks like: Work in a position that has minimal staffing requirements
  • Operating Vehicles, Mechanized Devices, or Equipment1.40.9Level 1 looks like: Drive a car

Work context

The conditions most characteristic of the work, on O*NET's 1–5 context scale.

  • E-Mail4.9
  • Spend Time Sitting4.9
  • Indoors, Environmentally Controlled4.7
  • Importance of Being Exact or Accurate4.6
  • Telephone Conversations4.4
  • Impact of Decisions on Co-workers or Company Results4.3
  • Freedom to Make Decisions4.2
  • Time Pressure4.2
  • Determine Tasks, Priorities and Goals4.1
  • Face-to-Face Discussions with Individuals and Within Teams4.1

Technology

67 tools

Software used in this work. In demand: among the tools job postings for this occupation name most. Hot: often named in job postings across the economy.

In demand (22)

  • Amazon Web Services AWS softwarehot
  • Bashhot
  • Chot
  • C#hot
  • C++hot
  • JavaScripthot
  • Linuxhot
  • Microsoft Active Directoryhot
  • Microsoft Azure softwarehot
  • Microsoft PowerShellhot
  • Oracle Javahot
  • Pythonhot
  • Splunk Enterprisehot
  • UNIXhot
  • Firewall software
  • Kali Linux
  • Metasploit
  • MITRE ATT&CK software
  • Nmap
  • Portswigger BurP Suite
  • Qualys Cloud Platform
  • Tenable Nessus

Hot (20; 14 more marked hot above)

  • Ansible software
  • Apple iOS
  • Apple macOS
  • Docker
  • GitHub
  • Go
  • Google Android
  • IBM Terraform
  • Kubernetes
  • Microsoft Active Server Pages ASP
  • Microsoft Excel
  • Microsoft Office software
  • Microsoft SQL Server
  • Oracle Java 2 Platform Enterprise Edition J2EE
  • Perl
  • PHP
  • Ruby
  • ServiceNow
  • Shell script
  • Structured query language SQL
Other tools (25)
  • Database management systems
  • Ghidra
  • Google Cloud software
  • Hex-Rays IDA Pro
  • HP WebInspect
  • IBM Middleware
  • IBM QRadar SIEM
  • Invicti Acunetix
  • Magellan Firmware
  • Management information systems MIS
  • Microsoft Azure DevOps Services
  • Microsoft Visual Basic Scripting Edition VBScript
  • Objective C
  • Rapid7 Nexpose
  • Rapid7 software
  • RESTful API
  • Rust programming language
  • Security assertion markup language SAML
  • Software development tools
  • Software libraries
  • System testing software
  • Vector 35 Binary Ninja
  • Web application software
  • Web server software
  • Wireshark

Related occupations

O*NET's own list of the occupations most related to this one, closest first.

  1. Information Security Engineers
  2. Information Security Analysts
  3. Software Quality Assurance Analysts and Testers
  4. Computer Systems Analysts
  5. Computer Systems Engineers/Architects
  6. Software Developers
  7. Validation Engineers
  8. Database Administrators
  9. Blockchain Engineers
  10. Computer Network Support Specialists

ESCO equivalents

From the official ESCO–O*NET crosswalk, strongest match first. A broader occupation takes in this one; a narrower one is a part of it.

Closest occupations

Compare any occupation →

Other O*NET occupations whose importance ratings on the 35 skills both rate are nearest to this one's, with the biggest differences named. A plain rule, not a hidden score.

Use this in your own job architecture

BlissPoint Organization Viewer can link a role directly to this occupation and suggest these skills as that role's starting requirements.

Try it free →

This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA), used under the CC BY 4.0 license; O*NET® is a trademark of USDOL/ETA. ESCO occupations and skills are from the European Commission's ESCO classification, and the occupation crosswalk is the official ESCO–O*NET mapping by the ESCO Secretariat with USDOL/ETA. This service uses the ESCO classification of the European Commission. BlissPoint Analytics has modified all or some of this information: skill, task and descriptor ratings are rounded to one decimal, and ESCO occupations show Job Zone and interests copied from a crosswalked O*NET occupation. USDOL/ETA has not approved, endorsed, or tested these modifications.