Penetration Testers

AI & job outlook

What today's research says about this occupation's exposure to AI, how AI is actually being used in it, and where employment is headed. These are positions within published studies — measures of exposure and usage, not predictions that this job will disappear.

Exposure to current AI

Each study uses its own scale, so the raw scores are not comparable across rows — the percentile (this job's rank among all U.S. occupations with data) is the comparable figure, and sizes the bars.

OpenAI's exposure study scores tasks three ways: with a language model alone (α 0.6), with simple added tooling (β 0.8), and including AI-powered software (γ 1.0). Higher means more of the job's tasks could be done at least twice as fast — not that they will be automated away.

Job outlook

Independent U.S. Bureau of Labor Statistics employment projection for 2024–2034 — a labor-market forecast, not an AI-impact forecast.

“Annual openings” counts new jobs plus replacements for workers who leave the occupation, so it can be large even when growth is modest.

Tasks

All 22 tasks O*NET lists for this occupation, ordered by importance. Each links to its own page with AI-exposure and observed-use detail.

• Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
• Collect stakeholder data to evaluate risk and to develop mitigation strategies.
• Conduct network and security system audits, using established criteria.
• Configure information systems to incorporate principles of least functionality and least access.
• Design security solutions to address known device vulnerabilities.
• Develop and execute tests that simulate the techniques of known cyber threat actors.
• Develop infiltration tests that exploit device vulnerabilities.
• Develop presentations on threat intelligence.
• Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
• Discuss security solutions with information technology teams or management.
• Document penetration test findings.
• Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.
• Gather cyber intelligence to identify vulnerabilities.
• Identify new threat tactics, techniques, or procedures used by cyber threat actors.
• Identify security system weaknesses, using penetration tests.
• Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.
• Keep up with new penetration testing tools and methods.
• Maintain up-to-date knowledge of hacking trends.
• Prepare and submit reports describing the results of security fixes.
• Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
• Update corporate policies to improve cyber security.
• Write audit reports to communicate technical and procedural findings and recommend solutions.

Work activities

• Evaluate characteristics of equipment or systems.
• Analyze risks to minimize losses or damages.
• Analyze security of systems, network, or data.
• Develop computer or information systems.
• Develop computer or information security policies or procedures.
• Test performance of electrical, electronic, mechanical, or integrated systems or equipment.
• Develop testing routines or procedures.
• Prepare scientific or technical reports or presentations.
• Discuss design or technical features of products or services with technical personnel.
• Prepare technical or operational reports.
• Interpret design or operational test results.
• Search files, databases or reference materials to obtain needed information.
• Investigate illegal or suspicious activities.
• Examine records or other types of data to investigate criminal activities.
• Stay informed about current developments in field of specialization.
• Test computer system operations to ensure proper functioning.
• Develop organizational policies or programs.
• Prepare analytical reports.

Skills in demand

Skills employers ask for in job postings for this occupation (Lightcast), with whether each is a common or specialized skill.

• Unix Specialized Skill
• Linux Specialized Skill
• Shell Script Specialized Skill
• ServiceNow Specialized Skill
• Microsoft Excel Common Skill
• Kubernetes Specialized Skill
• Github Specialized Skill
• Apple IOS Specialized Skill
• Nmap Specialized Skill
• Metasploit Specialized Skill
• Kali Linux Specialized Skill
• Wireshark Specialized Skill
• RESTful API Specialized Skill
• HP WebInspect Specialized Skill
• Database Management Systems Specialized Skill

Tools & technology

Showing the top 40 of 67.

How to get in

Job zone

Zone 4 — Job Zone Four: Considerable Preparation Needed

Education

Most of these occupations require a four-year bachelor's degree, but some do not.

Typical entry-level education

Bachelor's degree · BLS, the typical path — not a requirement

Related experience

A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.

Preparation level

SVP (7.0 to < 8.0) — total schooling plus on-the-job experience.

What to study: Biological and Biomedical Sciences , Computer and Information Sciences and Support Services , Health Professions and Related Programs , Homeland Security, Law Enforcement, Firefighting and Related Protective Services , Multi/Interdisciplinary Studies , Physical Sciences . Fields of study crosswalked to this occupation (NCES CIP–SOC), not a requirement.

Interests & work styles

The interests and personal qualities O*NET associates with people who do this work.

Work styles

Interest areas

Career interests (Holland / RIASEC)

Wages & employment

U.S. · annual wages (BLS OEWS)

Wages and employment are reported by BLS for the broader occupation group this specialty belongs to (SOC 15-1299), not for the specialty alone.

Industries that employ this occupation

Where these workers are employed, by number of jobs (national, BLS OEWS). Pay shown is the occupation's national median, not industry-specific.

Where this work is most concentrated

Industries where this occupation is far more common than in the economy as a whole. The location quotient is how many times more concentrated it is here (a value of 5 means five times its economy-wide share).

Related occupations

Part of the Digital Technology and Public Service & Safety career clusters.

• Information Security Engineers · 15-1299.05 Compare →
• Information Security Analysts · 15-1212.00 Compare →
• Software Quality Assurance Analysts and Testers · 15-1253.00 Compare →
• Computer Systems Analysts · 15-1211.00 Compare →
• Computer Systems Engineers/Architects · 15-1299.08 Compare →
• Software Developers · 15-1252.00 Compare →
• Validation Engineers · 17-2112.02 Compare →
• Database Administrators · 15-1242.00 Compare →
• Blockchain Engineers · 15-1299.07 Compare →
• Computer Network Support Specialists · 15-1231.00 Compare →
• Security Management Specialists · 13-1199.07 Compare →
• Security Managers · 11-3013.01 Compare →

Side-by-side comparisons place two occupations’ pay, preparation, skills, and AI exposure on the same page — same data, same scale, no forecast.

What you can do with this

Options the data surfaces for Penetration Testers — not advice or a forecast. Each is a real cross-link you can follow into the evidence.

Sources for this page

Every figure above traces to a named public dataset and the exact release below — not hand-written opinion. See the full methodology for what each measure does and does not mean.

• O*NET 30.3 U.S. Department of Labor / National Center for O*NET Development
• BLS Occupational Employment and Wage Statistics (OEWS) May 2024 U.S. Bureau of Labor Statistics
• BLS Employment Projections 2024–2034 U.S. Bureau of Labor Statistics
• Microsoft “Working with AI” working-with-ai Microsoft Research
• “GPTs are GPTs” (Eloundou et al.) arXiv 2303.10130 OpenAI / academic

Data compiled June 2, 2026. Figures are estimates, not advice.

@misc{singulariki-role-15-1299-04,
  title  = {Penetration Testers},
  author = {{Singulariki}},
  year   = {2026},
  note   = {O*NET 30.3; BLS Occupational Employment and Wage Statistics (OEWS) May 2024; BLS Employment Projections 2024–2034; Microsoft “Working with AI” working-with-ai; “GPTs are GPTs” (Eloundou et al.) arXiv 2303.10130. Accessed June 7, 2026},
  url    = {https://singulariki.com/roles/role-15-1299-04}
}