Computer and Mathematical · Holland code ICR

Penetration Testers

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

Also called: Cyber Systems Engineer, System Vulnerability Analyst, Threat Hunter, Vulnerability Assessor, Security Consultant, Security Engineer.

O*NET 15-1299.04

At a glance

US median annual pay: $116,580; Middle half earn $79,370 to $157,500. BLS OEWS, May 2025.
Preparation needed: Job Zone 4 of 5; Considerable preparation. Zone 1 is little or none; zone 5 is graduate-level.

What the work involves

The tasks workers in this occupation rate as most important, from the O*NET survey.

Document penetration test findings.
Identify security system weaknesses, using penetration tests.
Write audit reports to communicate technical and procedural findings and recommend solutions.
Gather cyber intelligence to identify vulnerabilities.
Maintain up-to-date knowledge of hacking trends.
Keep up with new penetration testing tools and methods.
Identify new threat tactics, techniques, or procedures used by cyber threat actors.
Conduct network and security system audits, using established criteria.

Skills and knowledge it leans on

Skills

Critical Thinking4.4 / 5
Reading Comprehension4.0 / 5
Writing4.0 / 5
Active Listening3.9 / 5
Active Learning3.6 / 5
Monitoring3.5 / 5

Knowledge areas

Computers and Electronics5.0 / 5
Telecommunications4.2 / 5
Engineering and Technology4.0 / 5
English Language3.8 / 5
Customer and Personal Service3.8 / 5
Law and Government3.4 / 5

Importance ratings on O*NET’s 1 to 5 scale. Higher means the occupation depends on it more.

Who tends to enjoy it

How strongly this occupation draws on each of the six Holland interest types, which is the same profile the career interests test compares you against.

Realistic49
Investigative70
Artistic5
Social17
Enterprising18
Conventional70

The same work abroad

Other countries classify jobs differently, so these are the closest matches through the international ISCO-08 standard, not exact equivalents.

European occupation titles (ESCO)

chief ICT security officer · DE IT-Sicherheitsleiter/IT-Sicherheitsleiterin · FR responsable de la sécurité des TIC
digital forensics expert · DE IT-Forensik-Experte/IT-Forensik-Expertin · FR spécialiste de l’investigation numérique
ethical hacker · DE ethischer Hacker/ethische Hackerin · FR hacker éthique
ICT security administrator · DE IT-Sicherheitsadministrator/IT-Sicherheitsadministratorin · FR administrateur sécurité informatique/administratrice sécurité informatique
ICT security manager · DE IT-Sicherheitsmanager/IT-Sicherheitsmanagerin · FR responsable de la sécurité informatique
ICT security technician · DE IT-Sicherheitstechniker/IT-Sicherheitstechnikerin · FR technicien en sécurité informatique/technicienne en sécurité informatique

Closest UK occupation groups (SOC 2020)

IT user support technicians (3132)135,000 employed
Cyber security professionals (2135)91,200 employed
IT quality and testing professionals (2136)32,600 employed

Employment is the UK Annual Population Survey for April 2025 to March 2026, all workers in the group, which can be broader than this one occupation.

Pay across Europe, for the whole group

Median annual earnings of all employees in “Professionals”. This is the broad ISCO group this occupation falls in, not the occupation itself, so treat it as context for the wage level, not as a salary for this job.

Median annual earnings, Professionals, by country
Country	Median pay
Belgium	€61,714
Germany	€59,529
Ireland	€56,877
Austria	€55,374
Netherlands	€53,595
Sweden	€43,567
France	€41,515
Spain	€35,735
Italy	€33,649
Portugal	€26,072
Poland	€14,380

Eurostat Structure of Earnings Survey, businesses with ten or more employees outside public administration, in euro and not adjusted for the cost of living. Reference years differ between sources: the US, Japan and Europe figures on this page come from different survey years, so compare them as rough levels, not to the euro or yen.

Is it a fit for you?

Interest is one input, alongside ability, pay and what is hiring near you. The career interests test takes about thirteen minutes and ranks occupations by how closely their profile matches yours.

Take the career interests test