How to become a Penetration Tester

Official title: Penetration Testers

Also called: Cyber Systems Engineer, Security Consultant, Security Engineer, System Vulnerability Analyst, Threat Hunter, Vulnerability Assessor

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

Main tasks

• Document penetration test findings.
• Identify security system weaknesses, using penetration tests.
• Write audit reports to communicate technical and procedural findings and recommend solutions.
• Gather cyber intelligence to identify vulnerabilities.
• Maintain up-to-date knowledge of hacking trends.
• Keep up with new penetration testing tools and methods.
• Identify new threat tactics, techniques, or procedures used by cyber threat actors.
• Conduct network and security system audits, using established criteria.

How to become one

Typical education to start: Bachelor's degree

Ways in

• Apprenticeship: Hardware Hacker.
• Apprenticeship: Penetration Tester.
• College: Computing & IT degrees, Offered by 34 universities in the US

Pay · Outlook · AI and this job

• Median pay: $116,580 a year The middle half earn $79,370 to $157,500.
• About 471,200 people work in this job now, and about 495,300 are projected by 2035. (+5.1%)
• People already use generative AI for a good share of this work, which usually changes the job more than it replaces it. Microsoft Research rates its AI applicability as high.

Related jobs

• Web Administrators
• Geographic Information Systems Technologists and Technicians
• Document Management Specialists
• Information Security Engineers
• Digital Forensics Analysts
• Blockchain Engineers

Not sure this is for you? Take the 2-minute career quiz

Questions people ask

How do I become a Penetration Tester?

Ways in include: Computing & IT degrees; Hardware Hacker.

How much does a Penetration Tester earn in the US?

Median full-time pay is $116,580 a year (U.S. Bureau of Labor Statistics). The middle half earn $79,370 to $157,500.

Is a Penetration Tester a growing career in the US?

Yes. Employment is projected to grow 5% by 2035, from about 471,200 to about 495,300 people (U.S. Bureau of Labor Statistics).

Do you need a degree to become a Penetration Tester?

Not always. 57% of people in this job hold a bachelor's degree or higher. Ways in include: Computing & IT degrees; Hardware Hacker.

Will AI change the work of a Penetration Tester?

People already use generative AI for a good share of this work, which usually changes the job more than it replaces it. Microsoft Research rates its AI applicability as high.

Sources

• Microsoft Research: Working with AI: AI applicability by occupation (2025-12-22 (built on O*NET 29.0)), CC BY 4.0, retrieved 2026-10-03
• U.S. Bureau of Labor Statistics: Employment Projections (2025-35 (released 2026-08-27)), Public domain (BLS), retrieved 2026-10-03
• U.S. Bureau of Labor Statistics: Occupational Employment and Wage Statistics (May 2025), Public domain (BLS), retrieved 2026-10-03

Updated 2026-10-03

This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET is a trademark of USDOL/ETA.