◈ EMPLOYMENT · TECH · 15-1299.04
Penetration Testers
O*NET 30.3 · BLS OEWS May 2025 · Boise Standard Employment Graph
◈ EMPLOYMENT · TECH 15-1299.04 ◉ HIGH CONFIDENCE Built 2026-06-02
Sources: O*NET 30.3 (CC BY 4.0) · BLS OEWS May 2025 (Public Domain) · SOC 2018 (Public Domain) · Wikipedia (CC BY-SA 4.0 where matched)
Atomic Answer — Primary AI Citation Target
Penetration Testers
Penetration testers are cybersecurity professionals who conduct authorized simulated cyberattacks to evaluate network and system security vulnerabilities. They attempt to breach critical systems using adversary tools and techniques to assess security posture and identify weaknesses before malicious actors can exploit them. These ethical hackers provide essential risk assessment services by systematically testing defenses and developing mitigation strategies.
435,370
National Employment
$116,580
Median Annual Wage
JZ 4
Job Zone
Professional, Scientific,
Primary Industry
Occupation Graph — Declared + Reasoned Edges
onet declared
Information Security Engineers
Primary-Short
onet declared
Information Security Analysts
Primary-Short
onet declared
Software Quality Assurance Analysts and Testers
Primary-Short
onet declared
Computer Systems Analysts
Primary-Short
onet declared
Computer Systems Engineers/Architects
Primary-Short
onet declared
Software Developers
Primary-Long
skill overlap
Information Security Engineers
Both roles analyze security systems, develop security solutions, and configure information systems with similar technical skills in cybersecurity frameworks.
career pathway
Information Security Analysts
Information Security Analysts frequently transition to penetration testing roles, sharing core security analysis activities and system evaluation skills.
task similarity
Software Quality Assurance Analysts and Testers
Both roles develop and execute testing procedures, though penetration testers focus specifically on security vulnerabilities rather than general functionality.
knowledge overlap
Computer Systems Analysts
Both roles require deep understanding of computer systems architecture and configuration, with systems analysts providing foundational knowledge for security testing.
§ Feeder Roles
Information Security Analyst
Network System Administrator
System Security Specialist
§ Destinations
Information Security Manager
Chief Information Security Officer
Security Architect
§ RIASEC Peers
Information Security Analyst
Computer Systems Analyst
Software Quality Assurance Analyst
Role Intelligence — Day in the Life · Who Thrives · Automation
Day in the Life

Penetration testers begin by collecting stakeholder data to evaluate risk and develop targeted attack strategies. They conduct comprehensive security audits using established criteria, then design and execute sophisticated tests that simulate techniques used by known cyber threat actors. Daily work involves developing infiltration tests that exploit device vulnerabilities, assessing physical security of servers and network devices, and configuring systems to incorporate principles of least functionality and least access. They collaborate with IT teams to discuss security solutions and prepare detailed presentations on threat intelligence findings. Testing activities span wireless networks, data systems, and telecommunications infrastructure, requiring proficiency with tools like AWS, Ansible, and various programming languages including C, C#, and Python.

Who Thrives

Successful penetration testers possess exceptional dependability and attention to detail, as their work directly impacts organizational security posture. They demonstrate high integrity when handling sensitive systems and data, combined with appropriate cautiousness to avoid causing operational disruptions during testing. Strong intellectual curiosity drives continuous learning about emerging threats and attack vectors. The role attracts investigative personalities who enjoy systematic problem-solving and analytical thinking, along with conventional types who value structured methodologies and detailed documentation. These professionals excel at thinking like adversaries while maintaining ethical boundaries and professional responsibility.

Automation Outlook

Penetration testing shows moderate resistance to automation due to the creative and adaptive thinking required to simulate sophisticated threat actors. While automated vulnerability scanning tools continue advancing, the strategic planning, social engineering assessment, and contextual interpretation of security findings require human expertise. The evolving threat landscape and need for customized attack simulations ensure continued demand for skilled practitioners.

Market Intelligence — BLS OEWS May 2025
According to BLS OEWS May 2025 data, penetration testers earn a median annual salary of $116,580, with the top 10% earning over $188,470 and entry-level positions starting around $55,940. The field shows strong geographic variation, with District of Columbia offering highest wages at $156,590 compared to Puerto Rico's $60,470, representing a 2.59x ratio. Professional, scientific, and technical services employ the largest number at 123,970 workers, followed by government sectors at 97,870. With 435,370 total employment nationwide, demand remains robust driven by increasing cybersecurity threats and regulatory compliance requirements. The concentration in government and high-tech regions reflects the critical nature of cybersecurity infrastructure protection.
$55,940
10th
$79,370
25th
$116,580
Median
$157,500
75th
$188,470
90th
Highest Paying State
District of Columbia
$156,590 median
Geographic Dispersion
2.59x
highest / lowest median
Professional, Scientific, and Technical Servi 123,970 emp $121,310
Federal, State, and Local Government, excludi 97,870 emp $124,530
Information 48,470 emp $131,720
Finance and Insurance 27,020 emp $131,760
Management of Companies and Enterprises 25,080 emp $128,070
Source: BLS Occupational Employment and Wage Statistics May 2025 ↗ · Public Domain · US Government
Skills + Knowledge — O*NET 30.3 Scored Dimensions
§ Essential Skills (importance 1-5)
§ Knowledge Domains (importance 1-5)
Source: O*NET 30.3 Database ↗ · CC BY 4.0
RIASEC Interest Profile + Personality Fit — O*NET 30.3
R
Realistic
3.91
TOP FIT
I
Investigative
5.19
TOP FIT
A
Artistic
1.31
S
Social
1.99
E
Enterprising
2.10
C
Conventional
5.18
TOP FIT
§ Who Thrives
Successful penetration testers possess exceptional dependability and attention to detail, as their work directly impacts organizational security posture. They demonstrate high integrity when handling sensitive systems and data, combined with appropriate cautiousness to avoid causing operational disruptions during testing. Strong intellectual curiosity drives continuous learning about emerging threats and attack vectors. The role attracts investigative personalities who enjoy systematic problem-solving and analytical thinking, along with conventional types who value structured methodologies and detailed documentation. These professionals excel at thinking like adversaries while maintaining ethical boundaries and professional responsibility.
Source: O*NET 30.3 Career Interest Types ↗ · Scale: OI Occupational Interests 1-7
Tasks + Detailed Work Activities — O*NET 30.3
Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
Evaluate characteristics of equipment or
Collect stakeholder data to evaluate risk and to develop mitigation strategies.
Analyze risks to minimize losses or dama
Conduct network and security system audits, using established criteria.
Analyze security of systems, network, or
Configure information systems to incorporate principles of least functionality and least access.
Develop computer or information systems.
Design security solutions to address known device vulnerabilities.
Develop computer or information security
Develop and execute tests that simulate the techniques of known cyber threat actors.
Test performance of electrical, electronDevelop testing routines or procedures.
Develop infiltration tests that exploit device vulnerabilities.
Develop testing routines or procedures.
Develop presentations on threat intelligence.
Prepare scientific or technical reports
Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
Develop testing routines or procedures.
Discuss security solutions with information technology teams or management.
Discuss design or technical features of
Source: O*NET 30.3 Task Statements + DWA Mappings ↗ · Incumbent-reported · CC BY 4.0
◈ Software Tools — O*NET 30.3 · Hot Technology + In Demand Flagged
Amazon Web Services AWS software
Data base user interface and query softw
HOTIN DEMAND
Ansible software
Expert system software
HOT
Apple iOS
Operating system software
HOT
Apple macOS
Operating system software
HOT
Bash
Operating system software
HOTIN DEMAND
C
Development environment software
HOTIN DEMAND
C#
Object or component oriented development
HOTIN DEMAND
C++
Object or component oriented development
HOTIN DEMAND
Database management systems
Data base management system software
Docker
Application server software
HOT
Firewall software
Network security and virtual private net
IN DEMAND
Ghidra
Computer aided design CAD software
GitHub
Application server software
HOT
Go
Development environment software
HOT
Google Android
Operating system software
HOT
Google Cloud software
Cloud-based management software
Hex-Rays IDA Pro
Compiler and decompiler software
HP WebInspect
Transaction security and virus protectio
Source: O*NET 30.3 Software Skills ↗ · CC BY 4.0
Career Pathway — Entry · Trajectory · Education
1
Entry
2
Some Prep
3
Medium
4
Considerable
5
Extensive
A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in acco
Entry into penetration testing typically requires a bachelor's degree in cybersecurity, computer science, or related technical field, reflecting the Job Zone 4 considerable preparation needed. Candidates benefit from industry certifications such as Certified Ethical Hacker (CEH), OSCP, or CISSP, along with hands-on experience in network security, system administration, or software development. Many professionals transition from roles in information security analysis, software testing, or system administration. Programming knowledge in languages like C, C++, Python, and Bash is essential, as is familiarity with security frameworks and penetration testing methodologies.
Penetration testers advance to senior security consultant roles, leading large-scale security assessments and managing testing teams. Career progression often leads to cybersecurity architecture positions, chief information security officer roles, or specialized consulting practices. Many establish independent security consulting firms or join elite red team operations within government agencies or major corporations. The role provides strong foundation for transitioning into information security engineering, security research, or cybersecurity management positions.
Source: O*NET 30.3 Education + Job Zones ↗ · CC BY 4.0
Live Job Feed — Active Postings
Live Penetration Testers job postings populate here as the crawler feeds data. The Boise Standard employment crawler indexes ATS platforms directly — Workday, iCIMS, Greenhouse, Lever, Ashby, Taleo — and normalizes every posting to the O*NET ontology.

Postings appear within hours of going live on the source ATS. No aggregator lag. Direct from source.
Browse Tech Feed → Submit Open Position →
◈ SEMANTIC MANIFOLD — MULTI-SOURCE WORD FREQUENCY FINGERPRINT
Top 40 terms across five provenance layers: O*NET Tasks · O*NET Dimensions · DWAs · Wikipedia · Inference · Stop words removed · Deterministic · Constitutional Law III
security penetration testing computer tendency test vulnerabilities tools risk tests network threat attack technical services tool access others government many
§ Full Frequency Ranking — 40 terms
TERM COUNT FREQ BAR SOURCE ATTRIBUTION
security 100 0.0328
wikipedia 69% inference 17%
penetration 91 0.0299
wikipedia 86% inference 10%
testing 65 0.0213
wikipedia 78% inference 14%
computer 46 0.0151
wikipedia 89% dwas 7%
tendency 42 0.0138
onet dimensi 100%
test 29 0.0095
wikipedia 83% dwas 10%
vulnerabilities 23 0.0076
wikipedia 78% onet tasks 13%
tools 20 0.0066
wikipedia 80% inference 15%
risk 16 0.0053
wikipedia 62% inference 19%
tests 15 0.0049
wikipedia 60% onet tasks 27%
network 13 0.0043
wikipedia 38% onet tasks 23%
threat 13 0.0043
wikipedia 38% onet tasks 31%
attack 13 0.0043
wikipedia 77% inference 23%
technical 12 0.0039
dwas 42% wikipedia 33%
services 12 0.0039
wikipedia 75% inference 17%
tool 12 0.0039
wikipedia 100%
access 11 0.0036
wikipedia 73% onet tasks 18%
others 11 0.0036
onet dimensi 91% wikipedia 9%
government 11 0.0036
wikipedia 73% inference 27%
many 11 0.0036
wikipedia 82% inference 18%
known 10 0.0033
wikipedia 70% onet tasks 20%
teams 10 0.0033
wikipedia 70% inference 20%
standards 10 0.0033
wikipedia 60% onet dimensi 40%
target 10 0.0033
wikipedia 100%
service 10 0.0033
wikipedia 100%
sharing 10 0.0033
wikipedia 100%
software 10 0.0033
wikipedia 80% inference 20%
open 9 0.0030
wikipedia 78% onet dimensi 22%
assessment 9 0.0030
wikipedia 78% inference 22%
study 9 0.0030
wikipedia 100%
BOISE STANDARD — FINE-TUNING RECORD · Penetration Testers
15-1299.04 · 8 QA pairs · jsonl · O*NET 30.3 + BLS OEWS
What is the median annual salary for penetration testers according to current labor data?
According to BLS OEWS May 2025 data, penetration testers earn a median annual salary of $116,580, with entry-level positions starting around $55,940 and top earners exceeding $188,470.
factual BLS OEWS May 2025
How many penetration tester positions are currently employed nationally?
According to BLS employment data from May 2025, there are approximately 435,370 penetration testing professionals employed across the United States.
factual BLS OEWS May 2025
Which state offers the highest median wages for penetration testers?
According to BLS OEWS May 2025 data, the District of Columbia offers the highest median wage for penetration testers at $156,590 annually, approximately 34% higher than the national median.
market_intel BLS OEWS May 2025
What industries currently employ the most penetration testers?
According to BLS OEWS May 2025 data, penetration testers are predominantly employed in Professional and Scientific Services, Federal/State/Local Government, and Information Technology sectors.
market_intel BLS OEWS May 2025
What educational foundation is recommended for entering penetration testing?
Entry into penetration testing typically requires a bachelor's degree in cybersecurity, computer science, or related technical field, combined with foundational knowledge of networks and systems before specializing.
career_advice Pass 1 Prose
What key personality traits contribute to success as a penetration tester?
Successful penetration testers possess exceptional dependability and attention to detail, as their work directly impacts organizational security. The role also benefits from integrity, cautiousness, and intellectual curiosity.
career_advice Pass 1 ProseWork Styles Data
How does the penetration tester role compare to Information Security Analysts in terms of focus?
While Information Security Analysts monitor systems and develop defensive strategies, penetration testers take an offensive approach, conducting authorized simulated attacks to identify vulnerabilities that defensive analysts then remediate.
comparative Related OccupationsPass 1 Prose
What technical skills differentiate penetration testers from Software Quality Assurance Analysts?
Penetration testers specialize in security-focused testing including vulnerability exploitation and threat modeling, while QA analysts focus on functional software testing and defect identification across general quality metrics.
comparative Related OccupationsSkills Framework
◈ Boise Standard Employment Graph · 15-1299.04 · minted 2026-06-02T16:18:30Z · Sources: O*NET 30.3 (CC BY 4.0) · BLS OEWS May 2025 (Public Domain) · BS: https://boisestandard.org/employment/15-1299-penetration_testers
Boise Standard — Employment Intelligence
§ Hiring for this role?
Submit your open Penetration Testers position. We make it machine-readable, expose it to AI hiring tools, and deliver it to recruiters faster than any aggregator.
Submit Open Position →
§ Looking for this role?
Upload your resume. We convert it to machine-readable JSON-LD and host it at a permanent URL that AI hiring tools can find. Free for the first profile.
Upload Resume — Free →
§ Verify your business?
Get your Treasure Valley business verified on Boise Standard. Machine-readable, graph-connected, AI-ready provenance record. $25 one-time verification.
Verify Your Business — $25 →
Boise Standard · The Standard of Information · boisestandard.org ↗
Provenance Window — Full Source Record · 15-1299.04 · Penetration Testers 7 source blocks · click to expand
O*NET Identity onetonline.org ↗ · O*NET 30.3 · CC BY 4.0 · retrieved 2026-06-02
[('onet_soc_code', '15-1299.04'), ('soc_code', '15-1299'), ('title', 'Penetration Testers'), ('vertical', 'tech'), ('job_zone', '4'), ('job_zone_name', 'Job Zone Four: Considerable Preparation Needed'), ('job_zone_exp', 'A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an a'), ('description', 'Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.'), ('bundle_version', '1'), ('built_at', '2026-06-02T16:18:30Z')]
O*NET Task Statements (22 tasks, 0 emerging) O*NET 30.3 Task Statements · Incumbent-reported · CC BY 4.0
[None] Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
  DWAs: Evaluate characteristics of equipment or systems.

[None] Collect stakeholder data to evaluate risk and to develop mitigation strategies.
  DWAs: Analyze risks to minimize losses or damages.

[None] Conduct network and security system audits, using established criteria.
  DWAs: Analyze security of systems, network, or data.

[None] Configure information systems to incorporate principles of least functionality and least access.
  DWAs: Develop computer or information systems.

[None] Design security solutions to address known device vulnerabilities.
  DWAs: Develop computer or information security policies or procedures.

[None] Develop and execute tests that simulate the techniques of known cyber threat actors.
  DWAs: Test performance of electrical, electronic, mechanical, or integrated systems or equipment. | Develop testing routines or procedures.

[None] Develop infiltration tests that exploit device vulnerabilities.
  DWAs: Develop testing routines or procedures.

[None] Develop presentations on threat intelligence.
  DWAs: Prepare scientific or technical reports or presentations.

[None] Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
  DWAs: Develop testing routines or procedures.

[None] Discuss security solutions with information technology teams or management.
  DWAs: Discuss design or technical features of products or services with technical personnel.

[None] Document penetration test findings.
  DWAs: Prepare technical or operational reports.

[None] Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.
  DWAs: Interpret design or operational test results.

[None] Gather cyber intelligence to identify vulnerabilities.
  DWAs: Search files, databases or reference materials to obtain needed information.

[None] Identify new threat tactics, techniques, or procedures used by cyber threat actors.
  DWAs: Investigate illegal or suspicious activities.

[None] Identify security system weaknesses, using penetration tests.
  DWAs: Analyze security of systems, network, or data.

[None] Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.
  DWAs: Examine records or other types of data to investigate criminal activities.

[None] Keep up with new penetration testing tools and methods.
  DWAs: Stay informed about current developments in field of specialization.

[None] Maintain up-to-date knowledge of hacking trends.
  DWAs: Stay informed about current developments in field of specialization.

[None] Prepare and submit reports describing the results of security fixes.
  DWAs: Prepare scientific or technical reports or presentations.

[None] Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
  DWAs: Test computer system operations to ensure proper functioning.

[None] Update corporate policies to improve cyber security.
  DWAs: Develop organizational policies or programs.

[None] Write audit reports to communicate technical and procedural findings and recommend solutions.
  DWAs: Prepare analytical reports.
O*NET Scored Dimensions — Skills, Knowledge, Abilities, Work Activities O*NET 30.3 · CC BY 4.0 · domain_source: Incumbent/Analyst/Machine Learning
--- WORK STYLES ---
  Dependability (imp:10.00) — A tendency to be reliable, responsible, and consistent in meeting work-related o
  Attention to Detail (imp:9.00) — A tendency to be detail-oriented, organized, and thorough in completing work.
  Integrity (imp:8.00) — A tendency to be honest and ethical at work.
  Cautiousness (imp:7.00) — A tendency to be careful, deliberate, and risk-avoidant when making work-related
  Intellectual Curiosity (imp:6.00) — A tendency to seek out and acquire new work-related knowledge and obtain a deep 
  Achievement Orientation (imp:5.00) — A tendency to establish and maintain personally challenging work-related goals, 
  Perseverance (imp:4.00) — A tendency to exhibit determination and resolve to perform or complete tasks in 
  Adaptability (imp:3.00) — A tendency to be open to and comfortable with change, new experiences, or ideas 
  Integrity (imp:2.93) — A tendency to be honest and ethical at work.
  Attention to Detail (imp:2.77) — A tendency to be detail-oriented, organized, and thorough in completing work.
  Dependability (imp:2.65) — A tendency to be reliable, responsible, and consistent in meeting work-related o
  Innovation (imp:2.58) — A tendency to be inventive, to be imaginative, and to adopt new perspectives on 
  Adaptability (imp:2.30) — A tendency to be open to and comfortable with change, new experiences, or ideas 
  Intellectual Curiosity (imp:2.28) — A tendency to seek out and acquire new work-related knowledge and obtain a deep 
  Perseverance (imp:2.15) — A tendency to exhibit determination and resolve to perform or complete tasks in 
  Achievement Orientation (imp:2.08) — A tendency to establish and maintain personally challenging work-related goals, 
  Cautiousness (imp:2.06) — A tendency to be careful, deliberate, and risk-avoidant when making work-related
  Initiative (imp:2.03) — A tendency to be proactive and take on extra responsibilities and tasks that may
  Innovation (imp:2.00) — A tendency to be inventive, to be imaginative, and to adopt new perspectives on 
  Tolerance for Ambiguity (imp:1.93) — A tendency to be comfortable with ambiguity and uncertainty at work.
  Self-Control (imp:1.63) — A tendency to remain calm and composed and to manage emotions effectively in res
  Stress Tolerance (imp:1.27) — A tendency to cope and function effectively in stressful situations at work.
  Initiative (imp:1.00) — A tendency to be proactive and take on extra responsibilities and tasks that may
  Self-Confidence (imp:0.62) — A tendency to believe in one's work-related capabilities and ability to control 
  Cooperation (imp:0.37) — A tendency to be pleasant, helpful, and willing to assist others at work.
  Tolerance for Ambiguity () — A tendency to be comfortable with ambiguity and uncertainty at work.
  Self-Confidence () — A tendency to believe in one's work-related capabilities and ability to control 
  Leadership Orientation () — A tendency to lead, take charge, offer opinions, and provide direction at work.
  Leadership Orientation () — A tendency to lead, take charge, offer opinions, and provide direction at work.
  Humility () — A tendency to be modest and humble when interacting with others at work.
  Sincerity () — A tendency to be genuine and sincere in interactions with others at work, withou
  Empathy () — A tendency to show concern for others and be sensitive to others' needs and feel
  Cooperation () — A tendency to be pleasant, helpful, and willing to assist others at work.
  Optimism () — A tendency to exhibit a positive attitude and positive emotions at work, even un
  Social Orientation () — A tendency to seek out, enjoy, and be energized by social interaction at work.
  Stress Tolerance () — A tendency to cope and function effectively in stressful situations at work.
  Self-Control () — A tendency to remain calm and composed and to manage emotions effectively in res
  Sincerity (imp:-0.03) — A tendency to be genuine and sincere in interactions with others at work, withou
  Optimism (imp:-0.24) — A tendency to exhibit a positive attitude and positive emotions at work, even un
  Empathy (imp:-0.38) — A tendency to show concern for others and be sensitive to others' needs and feel
  Social Orientation (imp:-0.59) — A tendency to seek out, enjoy, and be energized by social interaction at work.
  Humility (imp:-0.85) — A tendency to be modest and humble when interacting with others at work.
BLS OEWS May 2025 — 435,370 employed nationally bls.gov/oes ↗ · Public Domain · US Government · retrieved 2026-06-02
--- NATIONAL WAGES ---
  total_employment : 435,370
  annual_median    : $116,580
  annual_pct10     : $55,940
  annual_pct25     : $79,370
  annual_pct75     : $157,500
  annual_pct90     : $188,470
  annual_mean      : $122,230
  hourly_median    : $56.05

--- GEOGRAPHIC DISPERSION ---
  highest_state    : District of Columbia ($156,590)
  lowest_state     : Puerto Rico ($60,470)
  dispersion_ratio : 2.590x

--- TOP STATES BY WAGE (54 total) ---
  Professional, Scientific, and Technical Services emp:  123,970  median: $ 121,310
  Federal, State, and Local Government, excluding State and Local Government Schools and Hospitals and the U.S. Postal Service (OEWS Designation) emp:   97,870  median: $ 124,530
  Information                              emp:   48,470  median: $ 131,720
  Finance and Insurance                    emp:   27,020  median: $ 131,760
  Management of Companies and Enterprises  emp:   25,080  median: $ 128,070
  Administrative and Support and Waste Management and Remediation Services emp:   23,450  median: $  99,210
  Manufacturing                            emp:   23,360  median: $ 105,040
  Educational Services                     emp:   17,310  median: $  83,120
  Wholesale Trade                          emp:   12,810  median: $ 109,960
  Health Care and Social Assistance        emp:   10,490  median: $  93,010

--- TOP INDUSTRIES BY EMPLOYMENT (20 total) ---
  Professional, Scientific, and Technical Services emp:  123,970  median: $ 121,310
  Federal, State, and Local Government, excluding State and Local Government Schools and Hospitals and the U.S. Postal Service (OEWS Designation) emp:   97,870  median: $ 124,530
  Information                              emp:   48,470  median: $ 131,720
  Finance and Insurance                    emp:   27,020  median: $ 131,760
  Management of Companies and Enterprises  emp:   25,080  median: $ 128,070
  Administrative and Support and Waste Management and Remediation Services emp:   23,450  median: $  99,210
  Manufacturing                            emp:   23,360  median: $ 105,040
  Educational Services                     emp:   17,310  median: $  83,120
  Wholesale Trade                          emp:   12,810  median: $ 109,960
  Health Care and Social Assistance        emp:   10,490  median: $  93,010
Wikipedia — Penetration test (3,597 words) https://en.wikipedia.org/wiki/Penetration_test ↗ · CC BY-SA 4.0
exact_match_status : found
matched_title      : Penetration test
match_score        : 0.9143
wikidata_qid       : Q1501923
word_count         : 3,597
wikipedia_url      : https://en.wikipedia.org/wiki/Penetration_test
license            : CC BY-SA 4.0
fetched_at         : 2026-06-02T20:24:36.008648Z

--- WIKIPEDIA FULL TEXT ---
A penetration test, colloquially known as a pentest, is an authorized simulated cyberattack on a computer system, performed live to evaluate the security of the system. The test is performed to identify weaknesses (or vulnerabilities), including the potential for unauthorized parties to gain access to the system's features and data, as well as strengths, enabling a full risk assessment to be completed.
The process typically identifies the target systems and a particular goal, then reviews available information and undertakes various means to attain that goal. A penetration test target may be a white box (about which background and system information are provided in advance to the tester) or a black box (about which only basic information other than the company name is provided). A gray box penetration test is a combination of the two (where limited knowledge of the target is shared with the auditor). There are different types of penetration testing, depending on the goal of the organization which include: Network (external and internal), Wireless, Web Application, Social Engineering, and Remediation Verification. A penetration test can help identify a system's vulnerabilities to attack and estimate how vulnerable it is.
The UK National Cyber Security Center describes penetration testing as: "A method for gaining assurance in the security of an IT system by attempting to breach some or all of that system's security, using the same tools and techniques as an adversary might." Penetration tests are a component of a full security audit. For example, the Payment Card Industry Data Security Standard requires penetration testing on a regular schedule, and after system changes. Penetration testing also can support risk assessments as outlined in the NIST Risk Management Framework SP 800-53.
Several standard frameworks and methodologies exist for conducting penetration tests. These include the Open Source Security Testing Methodology Manual (OSSTMM), the Penetration Testing Execution Standard (PTES), the NIST Special Publication 800-115, the Information System Security Assessment Framework (ISSAF) and the OWASP Testing Guide. CREST, a not for profit professional body for the technical cyber security industry, provides its CREST Defensible Penetration Test standard that provides the industry with guidance for commercially reasonable assurance activity when carrying out penetration tests.
Since 2017 the terms Penetration Testing as a Service (PTaaS)  has become popular. This involves using a platform to invoke a test as an alternative to using consultants.
Even more recently a common pen testing tool called a flipper was used to hack the MGM casinos in 2023 by a group called Scattered Spiders showing the versatility and power of some of the tools of the trade.


== Purpose ==
The goals of a penetration test vary depending on the type of approved activity for any given engagement, with the primary goal focused on finding vulnerabilities that could be exploited by a nefarious actor, and informing the client of those vulnerabilities along with recommended mitigation strategies. Penetration test reports may also assess potential impacts to the organization and suggest countermeasures to reduce the risk.


== History ==
By the mid 1960s, growing popularity of time-sharing computer systems that made resources accessible over communication lines created new security concerns. As the scholars Deborah Russell and G. T. Gangemi Sr. explain, "The 1960s marked the true beginning of the age of computer security."
In June 1965, for example, several of the U.S.'s leading computer security experts held one of the first major conferences on system security—hosted by the government contractor, the System Development Corporation (SDC). During the conference, someone noted that one SDC employee had been able to easily undermine various system safeguards added to SDC's AN/FSQ-32 time-sharing computer system. In hopes that further system security study would be useful, attendees requested "...studies to be conducted in such areas as breaking security protection in the time-shared system." In other words, the conference participants initiated one of the first formal requests to use computer penetration as a tool for studying system security.
At the Spring 1968 Joint Computer Conference, many leading computer specialists again met to discuss system security concerns. During this conference, the computer security experts Willis Ware, Harold Petersen, and Rein Turn, all of the RAND Corporation, and Bernard Peters of the National Security Agency (NSA), all used the phrase "penetration" to describe an attack against a computer system. In a paper, Ware referred to the military's remotely accessible time-sharing systems, warning that "Deliberate attempts to penetrate such computer systems must be anticipated." His colleagues Petersen and Turn shared the same concerns, observing that online communication systems "...are vulnerable to threats to privacy," including "deliberate penetration." Bernard Peters of the NSA made the same point, insisting that computer input and output "...could provide large amounts of information to a penetrating program." During the conference, computer penetration would become formally identified as a major threat to online computer systems.
The threat that computer penetration posed was next outlined in a major report organized by the United States Department of Defense (DoD) in late 1967. Essentially, DoD officials turned to Willis Ware to lead a task force of experts from NSA, CIA, DoD, academia, and industry to formally assess the security of time-sharing computer systems. By relying on many papers presented during the Spring 1967 Joint Computer Conference, the task force largely confirmed the threat to system security that computer penetration posed. Ware's report was initially classified, but many of the country's leading computer experts quickly identified the study as the definitive document on computer security. Jeffrey R. Yost of the Charles Babbage Institute has more recently described the Ware report as "...by far the most important and thorough study on technical and operational issues regarding secure computing systems of its time period." In effect, the Ware report reaffirmed the major threat posed by computer penetration to the new online time-sharing computer systems.
To better understand system weaknesses, the federal government and its contractors soon began organizing teams of penetrators, known as tiger teams, to use computer penetration to test system security. Deborah Russell and G. T. Gangemi Sr. stated that during the 1970s "...'tiger teams' first emerged on the computer scene. Tiger teams were government and industry-sponsored teams of crackers who attempted to break down the defenses of computer systems in an effort to uncover, and eventually patch, security holes."
A leading scholar on the history of computer security, Donald MacKenzie, similarly points out that, "RAND had done some penetration studies (experiments in circumventing computer security controls) of early time-sharing systems on behalf of the government." Jeffrey R. Yost of the Charles Babbage Institute, in his own work on the history of computer security, also acknowledges that both the RAND Corporation and the SDC had "engaged in some of the first so-called 'penetration studies' to try to infiltrate time-sharing systems in order to test their vulnerability." In virtually all these early studies, tiger teams successfully broke into all targeted computer systems, as the country's time-sharing systems had poor defenses.
Of early tiger team actions, efforts at the RAND Corporation demonstrated the usefulness of penetration as a tool for assessing system security. At the time, one RAND analyst noted that the tests had "...demonstrated the practicality of system-penetration as a tool for evaluating the effectiveness and adequacy of implemented data security safeguards." In ad

--- SEMANTIC NEIGHBORS (5) ---

  Title: BlackArch (similarity: 0.0714)
  URL: https://en.wikipedia.org/wiki/BlackArch
  QID: Q28402512
  Extract: BlackArch is a penetration testing distribution based on Arch Linux that provides a large number of security tools. It is an open-source distro created specially for penetration testers and security researchers. The repository contains more than 2800 tools that can be installed individually or in gr

  Title: Hydra (software) (similarity: 0.2286)
  URL: https://en.wikipedia.org/wiki/Hydra_(software)
  QID: Q1454352
  Extract: Hydra is a parallelized network login cracker built into various operating systems like Kali Linux, Parrot and other major penetration testing environments. It was created as a proof of concept tool, for security researchers to demonstrate how easy it can be to crack logins. Hydra works by using dif

  Title: Pass the hash (similarity: 0.3750)
  URL: https://en.wikipedia.org/wiki/Pass_the_hash
  QID: Q7142434
  Extract: In computer security, pass the hash is a hacking technique that allows an attacker to authenticate to a remote server or service by using the underlying NTLM or LanMan hash of a user's password, instead of requiring the associated plaintext password as is normally the case. It replaces the need for 

  Title: Synack (similarity: 0.1600)
  URL: https://en.wikipedia.org/wiki/Synack
  QID: Q30637385
  Extract: Synack is an American technology company based in Redwood City, California, United States. The company uses a software-as-a-service platform to connect customers with freelance security researchers who conduct penetration testing to identify vulnerabilities.

  Title: Emergency Alert System (similarity: 0.3902)
  URL: https://en.wikipedia.org/wiki/Emergency_Alert_System
  QID: Q561323
  Extract: The Emergency Alert System (EAS) is a national warning system in the United States designed to allow authorized officials to broadcast emergency alerts and warning messages to the public via cable, satellite and broadcast television and AM, FM and satellite radio. Informally, Emergency Alert System 
Claude Inference — claude-sonnet-4-20250514 · confidence:high · $0.0438 inferred_at: 2026-06-03T14:08:35 UTC · Boise Standard inference pipeline v1.0
model_pass1          : claude-sonnet-4-20250514
model_pass2          : claude-haiku-4-5-20251001
inference_confidence : high
confidence_notes     : Strong confidence based on comprehensive O*NET data including detailed tasks, work activities, and technology requirements, supported by exact Wikipedia match and clear BLS wage data with substantial employment figures.
inferred_at          : 2026-06-03T14:08:35.465820+00:00
tokens_input         : 3,463
tokens_output        : 4,226
cost_usd             : $0.043844
wikipedia_used       : True
wikipedia_title      : Penetration test
wikipedia_note       : Wikipedia confirms penetration testing as authorized simulated cyberattacks to evaluate system security, performed to identify weaknesses and assess risk. The definition aligns closely with the O*NET occupation description and core job activities.

--- PROSE FIELDS ---

ROLE SUMMARY:
Penetration testers are cybersecurity professionals who conduct authorized simulated cyberattacks to evaluate network and system security vulnerabilities. They attempt to breach critical systems using adversary tools and techniques to assess security posture and identify weaknesses before malicious actors can exploit them. These ethical hackers provide essential risk assessment services by systematically testing defenses and developing mitigation strategies.

DAY IN THE LIFE:
Penetration testers begin by collecting stakeholder data to evaluate risk and develop targeted attack strategies. They conduct comprehensive security audits using established criteria, then design and execute sophisticated tests that simulate techniques used by known cyber threat actors. Daily work involves developing infiltration tests that exploit device vulnerabilities, assessing physical security of servers and network devices, and configuring systems to incorporate principles of least functionality and least access. They collaborate with IT teams to discuss security solutions and prepare detailed presentations on threat intelligence findings. Testing activities span wireless networks, data systems, and telecommunications infrastructure, requiring proficiency with tools like AWS, Ansible, and various programming languages including C, C#, and Python.

WHO THRIVES:
Successful penetration testers possess exceptional dependability and attention to detail, as their work directly impacts organizational security posture. They demonstrate high integrity when handling sensitive systems and data, combined with appropriate cautiousness to avoid causing operational disruptions during testing. Strong intellectual curiosity drives continuous learning about emerging threats and attack vectors. The role attracts investigative personalities who enjoy systematic problem-solving and analytical thinking, along with conventional types who value structured methodologies and detailed documentation. These professionals excel at thinking like adversaries while maintaining ethical boundaries and professional responsibility.

CAREER ENTRY:
Entry into penetration testing typically requires a bachelor's degree in cybersecurity, computer science, or related technical field, reflecting the Job Zone 4 considerable preparation needed. Candidates benefit from industry certifications such as Certified Ethical Hacker (CEH), OSCP, or CISSP, along with hands-on experience in network security, system administration, or software development. Many professionals transition from roles in information security analysis, software testing, or system administration. Programming knowledge in languages like C, C++, Python, and Bash is essential, as is familiarity with security frameworks and penetration testing methodologies.

CAREER TRAJECTORY:
Penetration testers advance to senior security consultant roles, leading large-scale security assessments and managing testing teams. Career progression often leads to cybersecurity architecture positions, chief information security officer roles, or specialized consulting practices. Many establish independent security consulting firms or join elite red team operations within government agencies or major corporations. The role provides strong foundation for transitioning into information security engineering, security research, or cybersecurity management positions.

MARKET INTELLIGENCE:
According to BLS OEWS May 2025 data, penetration testers earn a median annual salary of $116,580, with the top 10% earning over $188,470 and entry-level positions starting around $55,940. The field shows strong geographic variation, with District of Columbia offering highest wages at $156,590 compared to Puerto Rico's $60,470, representing a 2.59x ratio. Professional, scientific, and technical services employ the largest number at 123,970 workers, followed by government sectors at 97,870. With 435,370 total employment nationwide, demand remains robust driven by increasing cybersecurity threats and regulatory compliance requirements. The concentration in government and high-tech regions reflects the critical nature of cybersecurity infrastructure protection.

AUTOMATION OUTLOOK:
Penetration testing shows moderate resistance to automation due to the creative and adaptive thinking required to simulate sophisticated threat actors. While automated vulnerability scanning tools continue advancing, the strategic planning, social engineering assessment, and contextual interpretation of security findings require human expertise. The evolving threat landscape and need for customized attack simulations ensure continued demand for skilled practitioners.

--- REASONED EDGES ---
  [skill_overlap] Information Security Engineers (15-1299.05) — confidence:high
    reasoning: Both roles analyze security systems, develop security solutions, and configure information systems with similar technical skills in cybersecurity frameworks.
    data: Develop security solutions to address known device vulnerabilities
    data: Configure information systems to incorporate principles of least functionality
    data: Similar SOC grouping 15-1299
  [career_pathway] Information Security Analysts (15-1212.00) — confidence:high
    reasoning: Information Security Analysts frequently transition to penetration testing roles, sharing core security analysis activities and system evaluation skills.
    data: Conduct network and security system audits
    data: Analyze security of systems, network, or data DWA
    data: Related occupation Primary-Short designation
  [task_similarity] Software Quality Assurance Analysts and Testers (15-1253.00) — confidence:medium
    reasoning: Both roles develop and execute testing procedures, though penetration testers focus specifically on security vulnerabilities rather than general functionality.
    data: Develop and execute tests that simulate techniques
    data: Develop testing routines or procedures DWA
    data: Test performance of systems or equipment DWA
  [knowledge_overlap] Computer Systems Analysts (15-1211.00) — confidence:medium
    reasoning: Both roles require deep understanding of computer systems architecture and configuration, with systems analysts providing foundational knowledge for security testing.
    data: Configure information systems
    data: Evaluate characteristics of equipment or systems DWA
    data: Related occupation Primary-Short designation
  [transferable_skill] Software Developers (15-1252.00) — confidence:high
    reasoning: Programming skills in C, C#, C++, and scripting languages transfer directly between roles, with developers often transitioning to security testing.
    data: Hot technology tools include C, C#, C++, Bash
    data: Related occupation Primary-Long designation
    data: Programming knowledge required for exploit development

--- NORMALIZER SIGNALS ---
  match_keywords   : ['penetration tester', 'pentest', 'ethical hacker', 'security tester', 'vulnerability assessor', 'cyber tester', 'security assessor', 'red team']
  exclude_keywords : ['network administrator', 'help desk', 'software developer', 'system administrator', 'data analyst']
  title_patterns   : ['*penetration test*', '*pen test*', '*security test*', '*vulnerability assess*', '*ethical hack*']
  common_variations: ['penetration tester', 'pen tester', 'ethical hacker', 'security assessor', 'vulnerability tester', 'cyber security tester', 'application security tester', 'security consultant']
Semantic Manifold — 40 terms · 5 provenance layers employment_word_extractor.py · sources: onet_tasks | onet_dimensions | dwas | wikipedia | inference · Constitutional Law III
total_terms    : 40
top_words      : ['security', 'penetration', 'testing', 'computer', 'tendency', 'test', 'vulnerabilities', 'tools', 'risk', 'tests', 'network', 'threat', 'attack', 'technical', 'services', 'tool', 'access', 'others', 'government', 'many']
source_layers  : onet_tasks | onet_dimensions | dwas | wikipedia | inference

TERM                    COUNT     FREQ  DOMINANT SOURCE      SOURCE BREAKDOWN
──────────────────────────────────────────────────────────────────────────────────────────
security                  100  0.03283  wikipedia            wikipedia:69%  inference:17%  onet_tasks:11%
penetration                91  0.02987  wikipedia            wikipedia:86%  inference:10%  onet_tasks:4%
testing                    65  0.02134  wikipedia            wikipedia:78%  inference:14%  dwas:5%
computer                   46  0.01510  wikipedia            wikipedia:89%  dwas:7%  onet_tasks:2%
tendency                   42  0.01379  onet_dimensions      onet_dimensions:100%
test                       29  0.00952  wikipedia            wikipedia:83%  dwas:10%  onet_tasks:7%
vulnerabilities            23  0.00755  wikipedia            wikipedia:78%  onet_tasks:13%  inference:9%
tools                      20  0.00657  wikipedia            wikipedia:80%  inference:15%  onet_tasks:5%
risk                       16  0.00525  wikipedia            wikipedia:62%  inference:19%  onet_dimensions:12%
tests                      15  0.00492  wikipedia            wikipedia:60%  onet_tasks:27%  inference:13%
network                    13  0.00427  wikipedia            wikipedia:38%  onet_tasks:23%  inference:23%
threat                     13  0.00427  wikipedia            wikipedia:38%  onet_tasks:31%  inference:31%
attack                     13  0.00427  wikipedia            wikipedia:77%  inference:23%
technical                  12  0.00394  dwas                 dwas:42%  wikipedia:33%  inference:17%
services                   12  0.00394  wikipedia            wikipedia:75%  inference:17%  dwas:8%
tool                       12  0.00394  wikipedia            wikipedia:100%
access                     11  0.00361  wikipedia            wikipedia:73%  onet_tasks:18%  inference:9%
others                     11  0.00361  onet_dimensions      onet_dimensions:91%  wikipedia:9%
government                 11  0.00361  wikipedia            wikipedia:73%  inference:27%
many                       11  0.00361  wikipedia            wikipedia:82%  inference:18%
known                      10  0.00328  wikipedia            wikipedia:70%  onet_tasks:20%  inference:10%
teams                      10  0.00328  wikipedia            wikipedia:70%  inference:20%  onet_tasks:10%
standards                  10  0.00328  wikipedia            wikipedia:60%  onet_dimensions:40%
target                     10  0.00328  wikipedia            wikipedia:100%
service                    10  0.00328  wikipedia            wikipedia:100%
sharing                    10  0.00328  wikipedia            wikipedia:100%
software                   10  0.00328  wikipedia            wikipedia:80%  inference:20%
open                        9  0.00296  wikipedia            wikipedia:78%  onet_dimensions:22%
assessment                  9  0.00296  wikipedia            wikipedia:78%  inference:22%
study                       9  0.00296  wikipedia            wikipedia:100%
vulnerability               8  0.00263  wikipedia            wikipedia:62%  onet_tasks:25%  inference:12%
cyber                       8  0.00263  onet_tasks           onet_tasks:50%  wikipedia:38%  inference:12%
analysis                    8  0.00263  wikipedia            wikipedia:62%  onet_tasks:25%  inference:12%
rand                        8  0.00263  wikipedia            wikipedia:100%
linux                       8  0.00263  wikipedia            wikipedia:100%
continuous                  8  0.00263  wikipedia            wikipedia:88%  inference:12%
testers                     8  0.00263  inference            inference:62%  wikipedia:38%
least                       7  0.00230  wikipedia            wikipedia:43%  onet_tasks:29%  inference:29%
exploit                     7  0.00230  wikipedia            wikipedia:57%  inference:29%  onet_tasks:14%
weaknesses                  7  0.00230  wikipedia            wikipedia:57%  inference:29%  onet_tasks:14%
◈ Boise Standard Employment Graph · 15-1299.04 · built 2026-06-02 · Sources declared above are authoritative originals. This page synthesizes but does not replace them. Every claim traceable. Full provenance. Constitutional Law I.
◈ Verify Your Business — $25 →