# Penetration Testers

> Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

- Code: 15-1299.04 (O*NET-SOC; SOC 2018 15-1299)
- Family: [Computer & Mathematical](https://foundation.org.ai/occupations#family-15), one of its 38 occupations
- Tasks: 22 tasks (22 not rated)
- Page: https://foundation.org.ai/occupations/15-1299.04
- JSON: https://foundation.org.ai/data/tasks/15-1299.04.json

## What the work is made of

1. Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.  
   Not rated · Task 21744 · Listed by O*NET analysts, November 2020
2. Collect stakeholder data to evaluate risk and to develop mitigation strategies.  
   Not rated · Task 21745 · Listed by O*NET analysts, November 2020
3. Conduct network and security system audits, using established criteria.  
   Not rated · Task 21746 · Listed by O*NET analysts, November 2020
4. Configure information systems to incorporate principles of least functionality and least access.  
   Not rated · Task 21747 · Listed by O*NET analysts, November 2020
5. Design security solutions to address known device vulnerabilities.  
   Not rated · Task 21748 · Listed by O*NET analysts, November 2020
6. Develop and execute tests that simulate the techniques of known cyber threat actors.  
   Not rated · Task 21749 · Listed by O*NET analysts, November 2020
7. Develop infiltration tests that exploit device vulnerabilities.  
   Not rated · Task 21750 · Listed by O*NET analysts, November 2020
8. Develop presentations on threat intelligence.  
   Not rated · Task 21751 · Listed by O*NET analysts, November 2020
9. Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.  
   Not rated · Task 21752 · Listed by O*NET analysts, November 2020
10. Discuss security solutions with information technology teams or management.  
   Not rated · Task 21753 · Listed by O*NET analysts, November 2020
11. Document penetration test findings.  
   Not rated · Task 21754 · Listed by O*NET analysts, November 2020
12. Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.  
   Not rated · Task 21755 · Listed by O*NET analysts, November 2020
13. Gather cyber intelligence to identify vulnerabilities.  
   Not rated · Task 21756 · Listed by O*NET analysts, November 2020
14. Identify new threat tactics, techniques, or procedures used by cyber threat actors.  
   Not rated · Task 21757 · Listed by O*NET analysts, November 2020
15. Identify security system weaknesses, using penetration tests.  
   Not rated · Task 21758 · Listed by O*NET analysts, November 2020
16. Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.  
   Not rated · Task 21759 · Listed by O*NET analysts, November 2020
17. Keep up with new penetration testing tools and methods.  
   Not rated · Task 21760 · Listed by O*NET analysts, November 2020
18. Maintain up-to-date knowledge of hacking trends.  
   Not rated · Task 21761 · Listed by O*NET analysts, November 2020
19. Prepare and submit reports describing the results of security fixes.  
   Not rated · Task 21762 · Listed by O*NET analysts, November 2020
20. Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.  
   Not rated · Task 21763 · Listed by O*NET analysts, November 2020
21. Update corporate policies to improve cyber security.  
   Not rated · Task 21764 · Listed by O*NET analysts, November 2020
22. Write audit reports to communicate technical and procedural findings and recommend solutions.  
   Not rated · Task 21765 · Listed by O*NET analysts, November 2020

## More in Computer & Mathematical

- [Actuaries](https://foundation.org.ai/occupations/15-2011.00): 15 tasks
- [Bioinformatics Technicians](https://foundation.org.ai/occupations/15-2099.01): 19 tasks
- [Biostatisticians](https://foundation.org.ai/occupations/15-2041.01): 25 tasks
- [Blockchain Engineers](https://foundation.org.ai/occupations/15-1299.07): 17 tasks
- [Business Intelligence Analysts](https://foundation.org.ai/occupations/15-2051.01): 17 tasks
- [Clinical Data Managers](https://foundation.org.ai/occupations/15-2051.02): 21 tasks
- [Computer and Information Research Scientists](https://foundation.org.ai/occupations/15-1221.00): 15 tasks
- [Computer Network Architects](https://foundation.org.ai/occupations/15-1241.00): 33 tasks
- [Computer Network Support Specialists](https://foundation.org.ai/occupations/15-1231.00): 26 tasks
- [Computer Occupations, All Other](https://foundation.org.ai/occupations/15-1299.00): no tasks listed
- [Computer Programmers](https://foundation.org.ai/occupations/15-1251.00): 17 tasks
- [Computer Systems Analysts](https://foundation.org.ai/occupations/15-1211.00): 22 tasks
- [Computer Systems Engineers/Architects](https://foundation.org.ai/occupations/15-1299.08): 28 tasks
- [Computer User Support Specialists](https://foundation.org.ai/occupations/15-1232.00): 16 tasks
- [Data Scientists](https://foundation.org.ai/occupations/15-2051.00): 16 tasks
- [Data Warehousing Specialists](https://foundation.org.ai/occupations/15-1243.01): 18 tasks
- [Database Administrators](https://foundation.org.ai/occupations/15-1242.00): 18 tasks
- [Database Architects](https://foundation.org.ai/occupations/15-1243.00): 25 tasks
- [Digital Forensics Analysts](https://foundation.org.ai/occupations/15-1299.06): 20 tasks
- [Document Management Specialists](https://foundation.org.ai/occupations/15-1299.03): 23 tasks
- [Geographic Information Systems Technologists and Technicians](https://foundation.org.ai/occupations/15-1299.02): 29 tasks
- [Health Informatics Specialists](https://foundation.org.ai/occupations/15-1211.01): 17 tasks
- [Information Security Analysts](https://foundation.org.ai/occupations/15-1212.00): 11 tasks
- [Information Security Engineers](https://foundation.org.ai/occupations/15-1299.05): 20 tasks
- [Information Technology Project Managers](https://foundation.org.ai/occupations/15-1299.09): 21 tasks
- [Mathematical Science Occupations, All Other](https://foundation.org.ai/occupations/15-2099.00): no tasks listed
- [Mathematicians](https://foundation.org.ai/occupations/15-2021.00): 11 tasks
- [Network and Computer Systems Administrators](https://foundation.org.ai/occupations/15-1244.00): 20 tasks
- [Operations Research Analysts](https://foundation.org.ai/occupations/15-2031.00): 17 tasks
- [Software Developers](https://foundation.org.ai/occupations/15-1252.00): 19 tasks
- [Software Quality Assurance Analysts and Testers](https://foundation.org.ai/occupations/15-1253.00): 30 tasks
- [Statisticians](https://foundation.org.ai/occupations/15-2041.00): 19 tasks
- [Telecommunications Engineering Specialists](https://foundation.org.ai/occupations/15-1241.01): 26 tasks
- [Video Game Designers](https://foundation.org.ai/occupations/15-1255.01): 24 tasks
- [Web Administrators](https://foundation.org.ai/occupations/15-1299.01): 35 tasks
- [Web and Digital Interface Designers](https://foundation.org.ai/occupations/15-1255.00): 30 tasks
- [Web Developers](https://foundation.org.ai/occupations/15-1254.00): 29 tasks

## Where this comes from

Quoted from O*NET 29.0, U.S. Department of Labor, Employment and Training Administration, under CC BY 4.0: free to copy and reuse, with credit. Nothing on this page is written by the Org.AI Foundation.
