Penetration Testers
Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.
- Tasks
- 22 tasksNot rated core or supplemental
- Family
- Computer & MathematicalOne of its 38 occupations
- Code
- 15-1299.04SOC 2018: 15-1299
What the work is made of
O*NET lists these 22 tasks but has not rated them core or supplemental. Each is quoted as published, with where it came from.
Not rated: O*NET has not rated it core or supplemental
- Task 1. Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.Not ratedTask 21744Listed by O*NET analysts, November 2020
- Task 2. Collect stakeholder data to evaluate risk and to develop mitigation strategies.Not ratedTask 21745Listed by O*NET analysts, November 2020
- Task 3. Conduct network and security system audits, using established criteria.Not ratedTask 21746Listed by O*NET analysts, November 2020
- Task 4. Configure information systems to incorporate principles of least functionality and least access.Not ratedTask 21747Listed by O*NET analysts, November 2020
- Task 5. Design security solutions to address known device vulnerabilities.Not ratedTask 21748Listed by O*NET analysts, November 2020
- Task 6. Develop and execute tests that simulate the techniques of known cyber threat actors.Not ratedTask 21749Listed by O*NET analysts, November 2020
- Task 7. Develop infiltration tests that exploit device vulnerabilities.Not ratedTask 21750Listed by O*NET analysts, November 2020
- Task 8. Develop presentations on threat intelligence.Not ratedTask 21751Listed by O*NET analysts, November 2020
- Task 9. Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.Not ratedTask 21752Listed by O*NET analysts, November 2020
- Task 10. Discuss security solutions with information technology teams or management.Not ratedTask 21753Listed by O*NET analysts, November 2020
- Task 11. Document penetration test findings.Not ratedTask 21754Listed by O*NET analysts, November 2020
- Task 12. Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.Not ratedTask 21755Listed by O*NET analysts, November 2020
- Task 13. Gather cyber intelligence to identify vulnerabilities.Not ratedTask 21756Listed by O*NET analysts, November 2020
- Task 14. Identify new threat tactics, techniques, or procedures used by cyber threat actors.Not ratedTask 21757Listed by O*NET analysts, November 2020
- Task 15. Identify security system weaknesses, using penetration tests.Not ratedTask 21758Listed by O*NET analysts, November 2020
- Task 16. Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.Not ratedTask 21759Listed by O*NET analysts, November 2020
- Task 17. Keep up with new penetration testing tools and methods.Not ratedTask 21760Listed by O*NET analysts, November 2020
- Task 18. Maintain up-to-date knowledge of hacking trends.Not ratedTask 21761Listed by O*NET analysts, November 2020
- Task 19. Prepare and submit reports describing the results of security fixes.Not ratedTask 21762Listed by O*NET analysts, November 2020
- Task 20. Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.Not ratedTask 21763Listed by O*NET analysts, November 2020
- Task 21. Update corporate policies to improve cyber security.Not ratedTask 21764Listed by O*NET analysts, November 2020
- Task 22. Write audit reports to communicate technical and procedural findings and recommend solutions.Not ratedTask 21765Listed by O*NET analysts, November 2020
Where this comes from
Quoted from the U.S. Department of Labor, and credited. Nothing on this page is written by us.
How we copy and credit sources- Published byO*NET 29.0, U.S. Department of LaborEmployment and Training Administration
- ClassificationStandard Occupational Classification 2018, 15-1299
- LicenseCC BY 4.0Free to copy and reuse, with credit
- Changed by usNothing.
More in Computer & Mathematical
37 other occupations in this family, each with its own page.
- Actuaries15 tasks
- Bioinformatics Technicians19 tasks
- Biostatisticians25 tasks
- Blockchain Engineers17 tasks
- Business Intelligence Analysts17 tasks
- Clinical Data Managers21 tasks
- Computer and Information Research Scientists15 tasks
- Computer Network Architects33 tasks
- Computer Network Support Specialists26 tasks
- Computer Occupations, All OtherNo tasks listed
- Computer Programmers17 tasks
- Computer Systems Analysts22 tasks
- Computer Systems Engineers/Architects28 tasks
- Computer User Support Specialists16 tasks
- Data Scientists16 tasks
- Data Warehousing Specialists18 tasks
- Database Administrators18 tasks
- Database Architects25 tasks
- Digital Forensics Analysts20 tasks
- Document Management Specialists23 tasks
- Geographic Information Systems Technologists and Technicians29 tasks
- Health Informatics Specialists17 tasks
- Information Security Analysts11 tasks
- Information Security Engineers20 tasks
- Information Technology Project Managers21 tasks
- Mathematical Science Occupations, All OtherNo tasks listed
- Mathematicians11 tasks
- Network and Computer Systems Administrators20 tasks
- Operations Research Analysts17 tasks
- Software Developers19 tasks
- Software Quality Assurance Analysts and Testers30 tasks
- Statisticians19 tasks
- Telecommunications Engineering Specialists26 tasks
- Video Game Designers24 tasks
- Web Administrators35 tasks
- Web and Digital Interface Designers30 tasks
- Web Developers29 tasks
Use this record
Every task on this page is free to reuse, with credit to O*NET. The code and data behind the record are public.
Partner with us
Fund the next pass, contribute data, or build on the record. Tell us what you have in mind.
Partner with us