Penetration Tester
What the work is
Creates test cases using in-depth technical analysis of risks and typical vulnerabilities, and produces test scripts, materials and packs to test new and existing software or services. Plans, coordinates and conducts cyber threat emulation activities in support of certification, accreditation and operational priorities to verify deficiencies in technical security controls.
Would you enjoy the work?
These are the main tasks in the official description. Mark how each one sounds to you.
- Develops and executes penetration testing methodologies and strategies to identify weaknesses in security controls
- Creates test cases using in-depth technical analysis of risks and typical vulnerabilities
- Produces test scripts, materials and packs to test new and existing software or services for vulnerabilities
- Plans, coordinates and conducts cyber threat emulation activities to verify deficiencies in technical security controls, and provides recommendations for remediation
- Identifies vulnerability exploitations and potential attack vectors into a system, and analyses vulnerability scan results to assess security loopholes and threats
- May conduct phishing attacks or other tests to evaluate the effectiveness of security awareness training
Try it
A simulation and a case study from this kind of work, set in the security team of a fictional freight and logistics company, working from an office and a monitoring room. They are fictional.
The kind of days you could have
Good days
- You spot something odd early, and it turns out to be a real problem you stopped in time
- A colleague reports a suspicious email, and you thank them in front of the team
- You explain a risk so clearly that a busy manager decides to fix it today
Hard days
- An alert goes off at 4:50pm on a Friday and nobody knows if it is real
- People feel blamed for a mistake, and stop telling you about the next one
- You are asked to make something both completely secure and instantly easy to use
Written by Career Calling as a general guide. Real roles vary by employer and place.
Work a mission
Step into a simulated workplace in this field, with a brief from your manager.
Description and tasks: Australian Bureau of Statistics, Occupation Standard Classification for Australia, 2024, Version 1.0 (opens another site), occupation 271137, used under a Creative Commons Attribution 4.0 licence. The skill guide above is our plain English summary.