Home / Career Explorer / Computer Occupations

Penetration Testers

	Median Wage (USD, 2025)	Projected Job Openings (2025-2035)	Projected Growth (2025-2035)
National Statistics	$116580	31300	8.2%
State Statistics	-	-	-
City Statistics	-	-	-

Statistics

National

State

City

State

City

$116580

Median Wage (USD, 2025)

31300

Projected Job Openings (2025-2035)

8.2%

Projected Growth (2025-2035)

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

Experience Requirements Overview

Job Zone Four: Considerable Preparation Needed
A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.
Most of these occupations require a four-year bachelor's degree, but some do not.
Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training.

Education, Training and Experience

Required Level of Education: Bachelor's Degree

Related Work Experience: Over 2 years, up to and including 4 years

On-Site or In-Plant Training: Over 1 month, up to and including 3 months

On-the-Job Training: Over 1 month, up to and including 3 months

Detailed Work Activities

Evaluate characteristics of equipment or systems.
Analyze risks to minimize losses or damages.
Analyze security of systems, network, or data.
Develop computer or information systems.
Develop computer or information security policies or procedures.
Test performance of electrical, electronic, mechanical, or integrated systems or equipment.
Develop testing routines or procedures.
Prepare scientific or technical reports or presentations.
Discuss design or technical features of products or services with technical personnel.
Prepare technical or operational reports.
Interpret design or operational test results.
Search files, databases or reference materials to obtain needed information.
Investigate illegal or suspicious activities.
Examine records or other types of data to investigate criminal activities.
Stay informed about current developments in field of specialization.
Test computer system operations to ensure proper functioning.
Develop organizational policies or programs.
Prepare analytical reports.

Tasks

Document penetration test findings.
Identify security system weaknesses, using penetration tests.
Write audit reports to communicate technical and procedural findings and recommend solutions.
Gather cyber intelligence to identify vulnerabilities.
Maintain up-to-date knowledge of hacking trends.
Keep up with new penetration testing tools and methods.
Identify new threat tactics, techniques, or procedures used by cyber threat actors.
Conduct network and security system audits, using established criteria.
Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.
Prepare and submit reports describing the results of security fixes.
Develop and execute tests that simulate the techniques of known cyber threat actors.
Discuss security solutions with information technology teams or management.
Collect stakeholder data to evaluate risk and to develop mitigation strategies.
Update corporate policies to improve cyber security.
Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.
Develop infiltration tests that exploit device vulnerabilities.
Design security solutions to address known device vulnerabilities.
Configure information systems to incorporate principles of least functionality and least access.
Develop presentations on threat intelligence.

Work Styles

Innovation

A tendency to be inventive, to be imaginative, and to adopt new perspectives on ways to accomplish work.

Achievement Orientation

Intellectual Curiosity

Tolerance for Ambiguity

Initiative

Adaptability

Self-Confidence

Perseverance

Leadership Orientation

Humility

Sincerity

Empathy

Cooperation

Optimism

Social Orientation

Cautiousness

Attention to Detail

Dependability

Integrity

Stress Tolerance

Self-Control

Data Source: This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET® is a trademark of USDOL/ETA. This page includes Employment Projections program, Occupational Employment and Wage Statistics program, U.S. Bureau of Labor Statistics.

Session has been expired