Skip to content

O*NET-SOC 15-1299.04

Penetration Testers

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

From O*NET 30.3

Tasks

From O*NET 30.3, by importance, as O*NET OnLine lists them

Free · O*NET 30.3
  1. Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.21744
  2. Collect stakeholder data to evaluate risk and to develop mitigation strategies.21745
  3. Conduct network and security system audits, using established criteria.21746
  4. Configure information systems to incorporate principles of least functionality and least access.21747
  5. Design security solutions to address known device vulnerabilities.21748
  6. Develop and execute tests that simulate the techniques of known cyber threat actors.21749
  7. Develop infiltration tests that exploit device vulnerabilities.21750
  8. Develop presentations on threat intelligence.21751
  9. Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.21752
  10. Discuss security solutions with information technology teams or management.21753
  11. Document penetration test findings.21754
  12. Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.21755
  13. Gather cyber intelligence to identify vulnerabilities.21756
  14. Identify new threat tactics, techniques, or procedures used by cyber threat actors.21757
  15. Identify security system weaknesses, using penetration tests.21758
  16. Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.21759
  17. Keep up with new penetration testing tools and methods.21760
  18. Maintain up-to-date knowledge of hacking trends.21761
  19. Prepare and submit reports describing the results of security fixes.21762
  20. Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.21763
  21. Update corporate policies to improve cyber security.21764
  22. Write audit reports to communicate technical and procedural findings and recommend solutions.21765

Technology Skills

From O*NET 30.3, 67 examples in 23 categories, 34 Hot Technology

Free · O*NET 30.3

Data base user interface and query software

  • Amazon Web Services AWS softwareHot TechnologyIn Demand
  • Microsoft SQL ServerHot Technology
  • ServiceNowHot Technology
  • Structured query language SQLHot Technology

Expert system software

  • Ansible softwareHot Technology

Operating system software

  • Apple iOSHot Technology
  • Apple macOSHot Technology
  • BashHot TechnologyIn Demand
  • Google AndroidHot Technology
  • LinuxHot TechnologyIn Demand
  • Magellan Firmware
  • Shell scriptHot Technology
  • UNIXHot TechnologyIn Demand

Development environment software

  • CHot TechnologyIn Demand
  • GoHot Technology
  • Microsoft Azure DevOps Services
  • Microsoft Azure softwareHot TechnologyIn Demand
  • Microsoft PowerShellHot TechnologyIn Demand
  • Microsoft Visual Basic Scripting Edition VBScript
  • Oracle Java 2 Platform Enterprise Edition J2EEHot Technology
  • RubyHot Technology
  • Rust programming language
  • Software development tools
  • Software libraries
  • Web application software

Object or component oriented development software

  • C#Hot TechnologyIn Demand
  • C++Hot TechnologyIn Demand
  • Objective C
  • Oracle JavaHot TechnologyIn Demand
  • PerlHot Technology
  • PythonHot TechnologyIn Demand

Data base management system software

  • Database management systems

Application server software

  • DockerHot Technology
  • GitHubHot Technology
  • KubernetesHot Technology

Network security and virtual private network VPN equipment software

  • Firewall softwareIn Demand

Computer aided design CAD software

  • Ghidra

Cloud-based management software

  • Google Cloud software

Compiler and decompiler software

  • Hex-Rays IDA Pro
  • Vector 35 Binary Ninja

Transaction security and virus protection software

  • HP WebInspect
  • Invicti Acunetix
  • MetasploitIn Demand
  • NmapIn Demand
  • Portswigger BurP SuiteIn Demand
  • Rapid7 Nexpose
  • Rapid7 software
  • Tenable NessusIn Demand

Transaction server software

  • IBM Middleware
  • Web server software

Network monitoring software

  • IBM QRadar SIEM
  • Wireshark

Configuration management software

  • IBM TerraformHot Technology

Web platform development software

  • JavaScriptHot TechnologyIn Demand
  • Microsoft Active Server Pages ASPHot Technology
  • PHPHot Technology
  • RESTful API
  • Security assertion markup language SAML

Program testing software

  • Kali LinuxIn Demand
  • MITRE ATT&CK softwareIn Demand
  • System testing software

Enterprise resource planning ERP software

  • Management information systems MIS

Internet directory services software

  • Microsoft Active DirectoryHot TechnologyIn Demand

Spreadsheet software

  • Microsoft ExcelHot Technology

Office suite software

  • Microsoft Office softwareHot Technology

Cloud-based protection or security software

  • Qualys Cloud PlatformIn Demand

Enterprise system management software

  • Splunk EnterpriseHot TechnologyIn Demand

Detailed Work Activities

From O*NET 30.3, under their work activities; open one for the AI skills Workforce Automation maps to it

Free · O*NET 30.3

Getting Information

  • Examine records or other types of data to investigate criminal activities.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet
  • Investigate illegal or suspicious activities.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet
  • Search files, databases or reference materials to obtain needed information.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet

Inspecting Equipment, Structures, or Materials

  • Test computer system operations to ensure proper functioning.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 5 of 7 AI skills mapped to this activity, by automation level

    • Replaces 1
    • Augments 5
    • Supports 1
  • Test performance of electrical, electronic, mechanical, or integrated systems or equipment.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet

Judging the Qualities of Objects, Services, or People

  • Evaluate characteristics of equipment or systems.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet

Analyzing Data or Information

  • Analyze risks to minimize losses or damages.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet
  • Analyze security of systems, network, or data.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet
  • Interpret design or operational test results.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet

Thinking Creatively

  • Develop computer or information systems.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet

Updating and Using Relevant Knowledge

  • Stay informed about current developments in field of specialization.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet

Developing Objectives and Strategies

  • Develop organizational policies or programs.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet

Drafting, Laying Out, and Specifying Technical Devices, Parts, and Equipment

  • Develop testing routines or procedures.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 5 of 33 AI skills mapped to this activity, by automation level

    • Replaces 4
    • Augments 20
    • Supports 9
  • Develop computer or information security policies or procedures.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 4 of 4 AI skills mapped to this activity, by automation level

    • Augments 3
    • Supports 1

Documenting/Recording Information

  • Prepare scientific or technical reports or presentations.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet
  • Prepare analytical reports.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet
  • Prepare technical or operational reports.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet

Communicating with Supervisors, Peers, or Subordinates

  • Discuss design or technical features of products or services with technical personnel.
    WFA · Part of the paid plan when accounts open

    WFA (Workforce Automation) analysis: 0 of 0 AI skills mapped to this activity, by automation level

    • No tools yet
    • Not mapped yet

Job Zone

From O*NET 30.3

Free · O*NET 30.3

Job Zone Four: Considerable Preparation Needed

Workforce Automation analysis, not part of the source

WFA coverage: AI skills for this job

WFA · Part of the paid plan when accounts open

Pilot mapping: these skill links come from our seed list and haven’t been reviewed yet. Expect them to change as each one is checked.

DWAs covered by an AI skill3 of 18
Distinct tools41
Level mix
  • Replaces 5
  • Augments 26
  • Supports 11

Equivalents

NICE work roles, with their DCWF equivalents

Mapped to this job by the ETO-CSET NICE/O*NET crosswalk (2024); roles from NICE Framework Components v2.2.0, DCWF equivalents from DoD DCWF Tool v5.3 (2026-09-25)

Free · NICE Framework Components v2.2.0 and DoD DCWF Tool v5.3 (2026-09-25)