How do they match: Penetration Testers

  • Information Security Analyst
  • Information Security Assessor
  • Information Technology Security Tester
  • Systems Security Tester

  • Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

  • Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
  • Conduct network and security system audits, using established criteria.
  • Configure information systems to incorporate principles of least functionality and least access.
  • Discuss security solutions with information technology teams or management.
  • Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.
  • Identify security system weaknesses, using penetration tests.
  • Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.
  • Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.

  • Analyze security of systems, network, or data.
  • Develop computer or information systems.
  • Develop computer or information security policies or procedures.
  • Evaluate characteristics of equipment or systems.
  • Search files, databases or reference materials to obtain needed information.
  • Stay informed about current developments in field of specialization.
  • Test computer system operations to ensure proper functioning.
  • Test performance of electrical, electronic, mechanical, or integrated systems or equipment.