Penetration Testers
Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.
A wage reference for United States.
Published wage percentiles describe a distribution within the source occupation group. They provide context for a career decision; employer packages and job offers have their own terms.
This wage group may include multiple detailed occupations. The figures are for the source group, which may be broader than Penetration Testers. They are not an exact-title, employer, experience or seniority match.
May 2025 · USD · United States. Annual and hourly figures are shown only when the source publishes them; neither is calculated from the other.
U.S. Bureau of Labor Statistics occupational wage data, distributed through the O*NET® OnLine service.
Annual wage thresholds
USD per year
Hourly wage thresholds
USD per hour
| Percentile | Annual wage (USD/year) | Hourly wage (USD/hour) |
|---|---|---|
| 10th | $55,940 | $26.89 |
| 25th | $79,370 | $38.16 |
| 50th · Median | $116,580 | $56.05 |
| 75th | $157,500 | $75.72 |
| 90th | $188,470 | $90.61 |
“≥” means at least the published amount; “≤” means at most that amount. These are bounds, not exact values. “Not published” means the source did not provide that figure. Occupational wages follow the source definition and do not establish an employer’s base salary, equity or total compensation.
Where does your number sit?
Compare an entered wage with the published thresholds for United States. Your entry stays on this page.
This compares wage amounts to published percentile thresholds. It does not estimate your personal percentile, adjust for your experience, or compare total compensation. Match the wage definition and occupation group before using the result.
What this career involves.
Occupation definitions describe common work. Responsibilities and requirements vary by employer and specific job.
Selected title examples
Expand more title examples (25)
Typical tasks
- Document penetration test findings.
- Identify security system weaknesses, using penetration tests.
- Write audit reports to communicate technical and procedural findings and recommend solutions.
- Gather cyber intelligence to identify vulnerabilities.
- Maintain up-to-date knowledge of hacking trends.
- Keep up with new penetration testing tools and methods.
Expand more tasks (16)
- Identify new threat tactics, techniques, or procedures used by cyber threat actors.
- Conduct network and security system audits, using established criteria.
- Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
- Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
- Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.
- Prepare and submit reports describing the results of security fixes.
- Develop and execute tests that simulate the techniques of known cyber threat actors.
- Discuss security solutions with information technology teams or management.
- Collect stakeholder data to evaluate risk and to develop mitigation strategies.
- Update corporate policies to improve cyber security.
- Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
- Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.
- Develop infiltration tests that exploit device vulnerabilities.
- Design security solutions to address known device vulnerabilities.
- Configure information systems to incorporate principles of least functionality and least access.
- Develop presentations on threat intelligence.
Skills used in this work
- Critical Thinking
- Using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems.
- Reading Comprehension
- Understanding written sentences and paragraphs in work-related documents.
- Writing
- Communicating effectively in writing as appropriate for the needs of the audience.
- Active Listening
- Giving full attention to what other people are saying, taking time to understand the points being made, asking questions as appropriate, and not interrupting at inappropriate times.
- Complex Problem Solving
- Identifying complex problems and reviewing related information to develop and evaluate options and implement solutions.
- Programming
- Writing computer programs for various purposes.
Expand more skills (29)
- Active Learning
- Understanding the implications of new information for both current and future problem-solving and decision-making.
- Systems Evaluation
- Identifying measures or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system.
- Judgment and Decision Making
- Considering the relative costs and benefits of potential actions to choose the most appropriate one.
- Monitoring
- Monitoring/Assessing performance of yourself, other individuals, or organizations to make improvements or take corrective action.
- Systems Analysis
- Determining how a system should work and how changes in conditions, operations, and the environment will affect outcomes.
- Speaking
- Talking to others to convey information effectively.
- Quality Control Analysis
- Conducting tests and inspections of products, services, or processes to evaluate quality or performance.
- Time Management
- Managing one's own time and the time of others.
- Coordination
- Adjusting actions in relation to others' actions.
- Learning Strategies
- Selecting and using training/instructional methods and procedures appropriate for the situation when learning or teaching new things.
- Persuasion
- Persuading others to change their minds or behavior.
- Social Perceptiveness
- Being aware of others' reactions and understanding why they react as they do.
- Instructing
- Teaching others how to do something.
- Service Orientation
- Actively looking for ways to help people.
- Mathematics
- Using mathematics to solve problems.
- Operations Monitoring
- Watching gauges, dials, or other indicators to make sure a machine is working properly.
- Troubleshooting
- Determining causes of operating errors and deciding what to do about it.
- Negotiation
- Bringing others together and trying to reconcile differences.
- Operations Analysis
- Analyzing needs and product requirements to create a design.
- Management of Personnel Resources
- Motivating, developing, and directing people as they work, identifying the best people for the job.
- Technology Design
- Generating or adapting equipment and technology to serve user needs.
- Equipment Maintenance
- Performing routine maintenance on equipment and determining when and what kind of maintenance is needed.
- Equipment Selection
- Determining the kind of tools and equipment needed to do a job.
- Repairing
- Repairing machines or systems using the needed tools.
- Science
- Using scientific rules and methods to solve problems.
- Management of Financial Resources
- Determining how money will be spent to get the work done, and accounting for these expenditures.
- Management of Material Resources
- Obtaining and seeing to the appropriate use of equipment, facilities, and materials needed to do certain work.
- Operation and Control
- Controlling operations of equipment or systems.
- Installation
- Installing equipment, machines, wiring, or programs to meet specifications.
Explore wages by location.
0 retained state and local wage references are available. Start with these selected locations, or search the full market directory for this career.
Local wage references are not retained for this occupation. The national view and employer evidence may still help.
Available links reflect retained source coverage for this career.
Find the next step that fits.
Look at current disclosed job ranges, explore supported employer salary evidence, or build a proposed hiring range with your own assumptions.