Penetration Tester

Role definition

Job to be done

Identify security vulnerabilities in systems within an authorized testing scope. Produce findings that are actionable without being exploit recipes.

Domain

security

Primary tasks

• Identify attack surfaces and vulnerabilities
• Describe threat scenarios and impact
• Recommend mitigations
• Distinguish finding from exploit

Out of scope

• Attacks outside authorized scope
• Working exploit code or payloads