Computers and math
Information Security Engineers
- Median pay
- $116,580
- Outlook
- Faster than average
Bachelor's degree
- Reading Comprehension
- Critical Thinking
- Active Listening
SOC 15-1299.04Bright outlook
Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques.
Data verified Nov 2026 · CollegesRef 2026–27 edition
Source: BLS 2025 wages · 2025–35 projections · figures for the broader BLS group "Computer occupations, all other"
Annual pay range
435,370 people work in this occupation.
In short
Penetration testers evaluate network security by simulating cyberattacks to find system vulnerabilities. The role offers a median annual pay of $116,580, with opportunities growing faster than average.
Written with AI from the BLS, O*NET and CareerOneStop data on this page. Every figure is checked against that data before it is published.
Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.
Most need a bachelor's degree and several years of related experience.
Professionals in this field conduct simulated cyberattacks from both internal and external angles. They use adversary tools and techniques to breach critical systems, aiming to access sensitive information to evaluate overall security. Day-to-day tasks involve working with computers, getting and processing information, and analyzing data. Testers must think creatively to solve complex problems and make decisions that help secure systems.
This role requires strong skills in programming, critical thinking, and systems evaluation. Workers document their findings and interpret security information for others. Key knowledge areas include computers, electronics, telecommunications, and public safety. Having an investigative interest area is highly beneficial. Successful testers display work styles such as integrity, attention to detail, intellectual curiosity, and perseverance.
Entering this career typically requires considerable preparation, including a bachelor's degree and several years of experience in a related field. Students often major in computer and information sciences, computer science, computer and information technology administration and management, information science, or security science and technology. Other related majors include chemistry, biomathematics, bioinformatics, computational biology, and medical informatics.
To demonstrate expertise, professionals can pursue industry certifications. Available credentials include the Certified Penetration Testing Consultant, Certified Penetration Testing Engineer, and Certified Powershell Hacker, all offered by Mile2. Another option is the GIAC Red Team Professional certification from the Global Information Assurance Certification.
The median annual pay for penetration testers is $116,580. The lowest 10% of workers in this field earn less than $55,940, while the highest 10% earn more than $188,470. These wage figures represent the broader group classified as all other computer occupations.
Employment in this category is projected to grow by 5.1% from 2025 to 2035, which is faster than the average for all occupations. This growth is expected to result in 27,000 job openings each year. There are currently 435,370 people employed in this broader occupational group.
Interest code ICR. Compare it with yours
Application Security Assessor · Application Security Hacker · Application Security Tester · Certified Tester · Cyber Assessment Tester · Cyber Assessor · Cyber Security Engineer · Cyber Security Tester · Cyber Systems Engineer · Cybersecurity Engineer (Cyber Engineer)
Career pathway
Interests that fit the work, the career, majors that lead there and colleges whose graduates in those majors earn the most. Hover or focus a step to follow one path.
1Interests
2This career
3Majors
4Colleges
Interests
This career
Majors
Colleges
College Scorecard program outcomes
Programs that lead to this career, ranked by what their graduates earn four years after finishing. Earnings are for graduates who received federal aid.
Philadelphia, PA · Computer and Information Sciences, General · Bachelor's
Source: U.S. Department of Education College Scorecard field-of-study data, 2025. Programs with few graduates are not listed.
NCES CIP–SOC crosswalk
Related programs by four-digit CIP code. They are common routes in, not the only ones.
1,547 colleges offer it
1,371 colleges offer it
1,184 colleges offer it
1,070 colleges offer it
513 colleges offer it
446 colleges offer it
200 colleges offer it
178 colleges offer it
149 colleges offer it
113 colleges offer it
109 colleges offer it
60 colleges offer it
17 colleges offer it
CareerOneStop
What penetration testers may need beyond a degree, where a license is required, and what the work pays in each state.
Core certifications employers recognise for this work.
Programs of study that prepare people for this work. Showing 12 of 14.
Data from CareerOneStop, sponsored by the U.S. Department of Labor (Employment and Training Administration, with the Minnesota Department of Employment and Economic Development). Retrieved November 9, 2026.
Your plan
Courses, majors, colleges, scholarships and a timeline for this career, built from your profile.
Written with AI from the BLS, O*NET and CareerOneStop data on this page. Every figure is checked against that data before it is published.
People in this field are also called application security testers, cyber assessment testers, cybersecurity engineers, and application security hackers.
Professionals can earn certifications such as the Certified Penetration Testing Consultant, Certified Penetration Testing Engineer, Certified Powershell Hacker, or the GIAC Red Team Professional.
Typical majors include computer science, computer and information sciences, security science and technology, and information technology administration.
Every figure on this page comes from these public datasets. Missing values are shown as not reported, never estimated.
Version 31.0
Version 2025-35 · Data year 2025
Version 2025 · Data year 2025
Version 2020 · Data year 2020
O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. CollegesRef has modified all or some of this information.
Data from CareerOneStop, sponsored by the U.S. Department of Labor (Employment and Training Administration, with the Minnesota Department of Employment and Economic Development). Retrieved November 9, 2026.
Page data updated November 5, 2026.