SOC 15-1299.04Bright outlook

    Penetration Testers

    Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques.

    Median pay
    $116,580
    Growth
    +5.1%
    Faster than average
    Openings a year
    27,000
    Typical education
    Bachelor's degree

    Data verified Nov 2026 · CollegesRef 2026–27 edition

    Source: BLS 2025 wages · 2025–35 projections · figures for the broader BLS group "Computer occupations, all other"

    See the pathway

    Annual pay range

    Lowest 10% earn less than
    $55,940
    Median
    $116,580
    Highest 10% earn more than
    $188,470
    National wages for all workers in this occupation. BLS Occupational Employment and Wage Statistics, May 2025.

    435,370 people work in this occupation.

    In short

    Penetration testers evaluate network security by simulating cyberattacks to find system vulnerabilities. The role offers a median annual pay of $116,580, with opportunities growing faster than average.

    Written with AI from the BLS, O*NET and CareerOneStop data on this page. Every figure is checked against that data before it is published.

    What penetration testers do

    Job Zone 4: Considerable preparation

    Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

    Most need a bachelor's degree and several years of related experience.

    What the work is like

    Professionals in this field conduct simulated cyberattacks from both internal and external angles. They use adversary tools and techniques to breach critical systems, aiming to access sensitive information to evaluate overall security. Day-to-day tasks involve working with computers, getting and processing information, and analyzing data. Testers must think creatively to solve complex problems and make decisions that help secure systems.

    This role requires strong skills in programming, critical thinking, and systems evaluation. Workers document their findings and interpret security information for others. Key knowledge areas include computers, electronics, telecommunications, and public safety. Having an investigative interest area is highly beneficial. Successful testers display work styles such as integrity, attention to detail, intellectual curiosity, and perseverance.

    How to get there

    Entering this career typically requires considerable preparation, including a bachelor's degree and several years of experience in a related field. Students often major in computer and information sciences, computer science, computer and information technology administration and management, information science, or security science and technology. Other related majors include chemistry, biomathematics, bioinformatics, computational biology, and medical informatics.

    To demonstrate expertise, professionals can pursue industry certifications. Available credentials include the Certified Penetration Testing Consultant, Certified Penetration Testing Engineer, and Certified Powershell Hacker, all offered by Mile2. Another option is the GIAC Red Team Professional certification from the Global Information Assurance Certification.

    Pay and outlook explained

    The median annual pay for penetration testers is $116,580. The lowest 10% of workers in this field earn less than $55,940, while the highest 10% earn more than $188,470. These wage figures represent the broader group classified as all other computer occupations.

    Employment in this category is projected to grow by 5.1% from 2025 to 2035, which is faster than the average for all occupations. This growth is expected to result in 27,000 job openings each year. There are currently 435,370 people employed in this broader occupational group.

    Interest profile

    Realistic (R)
    49 / 100
    Investigative (I) · strongest
    70 / 100
    Artistic (A)
    5 / 100
    Social (S)
    17 / 100
    Enterprising (E)
    18 / 100
    Conventional (C)
    70 / 100
    How strongly each interest area describes the work, from O*NET (scores rescaled to 0–100). The interest code lists the strongest areas in order.

    Interest code ICR. Compare it with yours

    What you'd do

    Working with Computers
    100
    Documenting/Recording Information
    91
    Making Decisions and Solving Problems
    90
    Getting Information
    90
    Evaluating Information to Determine Compliance with Standards
    89
    Updating and Using Relevant Knowledge
    86
    Analyzing Data or Information
    86
    Processing Information
    85
    Interpreting the Meaning of Information for Others
    81
    Thinking Creatively
    81
    Work activities rated by importance for this occupation, O*NET (0–100).

    Skills and strengths

    Skills

    • Critical Thinking
    • Reading Comprehension
    • Writing
    • Active Listening
    • Complex Problem Solving
    • Programming
    • Active Learning
    • Systems Evaluation
    • Judgment and Decision Making
    • Monitoring

    Knowledge

    • Computers and Electronics
    • Telecommunications
    • Engineering and Technology
    • English Language
    • Customer and Personal Service
    • Law and Government
    • Education and Training
    • Administration and Management
    • Public Safety and Security
    • Communications and Media

    Abilities

    • Inductive Reasoning
    • Written Expression
    • Deductive Reasoning
    • Problem Sensitivity
    • Oral Comprehension
    • Written Comprehension
    • Fluency of Ideas
    • Information Ordering
    • Oral Expression
    • Near Vision

    Work styles

    • Integrity
    • Attention to Detail
    • Dependability
    • Innovation
    • Adaptability
    • Intellectual Curiosity
    • Perseverance
    • Achievement Orientation
    • Cautiousness
    • Initiative

    Also called

    Application Security Assessor · Application Security Hacker · Application Security Tester · Certified Tester · Cyber Assessment Tester · Cyber Assessor · Cyber Security Engineer · Cyber Security Tester · Cyber Systems Engineer · Cybersecurity Engineer (Cyber Engineer)

    Career pathway

    From your interests to penetration testers

    Interests that fit the work, the career, majors that lead there and colleges whose graduates in those majors earn the most. Hover or focus a step to follow one path.

    1. Interests

    2. This career

      • Penetration Testers$116,580 median pay
    3. Majors

    4. Colleges

    College Scorecard program outcomes

    Colleges with strong outcomes

    Programs that lead to this career, ranked by what their graduates earn four years after finishing. Earnings are for graduates who received federal aid.

    1. 1Carnegie Mellon University logo
      Carnegie Mellon University

      Pittsburgh, PA · Computer Science · Bachelor's

      1 yr after
      $173,492
      4 yrs after
      $268,121
      Median debt
      $19,000
    2. 2University of Pennsylvania UPENN logo
      University of Pennsylvania UPENN

      Philadelphia, PA · Computer and Information Sciences, General · Bachelor's

      1 yr after
      $143,850
      4 yrs after
      $241,380
      Median debt
      $11,000
    3. 3Massachusetts Institute of Technology MIT logo
      Massachusetts Institute of Technology MIT

      Cambridge, MA · Computer Science · Bachelor's

      1 yr after
      $171,815
      4 yrs after
      $225,141
      Median debt
      $10,000
    4. 4Cornell University-New York logo
      Cornell University-New York

      Ithaca, NY · Computer Science · Bachelor's

      1 yr after
      $151,551
      4 yrs after
      $223,309
      Median debt
      $12,500
    5. 5Princeton University logo
      Princeton University

      Princeton, NJ · Computer Science · Bachelor's

      1 yr after
      $155,162
      4 yrs after
      $217,973
      Median debt
      Not reported
    6. 6Pomona College logo
      Pomona College

      Claremont, CA · Computer Science · Bachelor's

      1 yr after
      $100,072
      4 yrs after
      $217,051
      Median debt
      Not reported
    7. 7Stanford University logo
      Stanford University

      Stanford, CA · Computer Science · Bachelor's

      1 yr after
      $157,763
      4 yrs after
      $214,907
      Median debt
      $12,000
    8. 8Brown University logo
      Brown University

      Providence, RI · Computer Science · Bachelor's

      1 yr after
      $141,816
      4 yrs after
      $214,479
      Median debt
      $15,000

    Source: U.S. Department of Education College Scorecard field-of-study data, 2025. Programs with few graduates are not listed.

    NCES CIP–SOC crosswalk

    Majors that lead here

    Related programs by four-digit CIP code. They are common routes in, not the only ones.

    CareerOneStop

    Certifications, licenses and pay by state

    What penetration testers may need beyond a degree, where a license is required, and what the work pays in each state.

    Certifications

    Core certifications employers recognise for this work.

    Search all certifications on CareerOneStop

    Training

    Programs of study that prepare people for this work. Showing 12 of 14.

    • Accounting and Computer Science
    • Bioinformatics
    • Cheminformatics/Chemistry Informatics
    • Computational Biology
    • Computational Science
    • Computer and Information Sciences, General
    • Computer Science
    • Cyber/Computer Forensics and Counterterrorism
    • Data Processing and Data Processing Technology/Technician
    • Human Computer Interaction
    • Information Science/Studies
    • Information Technology Project Management

    Find training near you on CareerOneStop

    Data from CareerOneStop, sponsored by the U.S. Department of Labor (Employment and Training Administration, with the Minnesota Department of Employment and Economic Development). Retrieved November 9, 2026.

    Your plan

    Build my pathway plan

    Courses, majors, colleges, scholarships and a timeline for this career, built from your profile.

    Questions about penetration testers

    Written with AI from the BLS, O*NET and CareerOneStop data on this page. Every figure is checked against that data before it is published.

    What are some alternative job titles for penetration testers?

    People in this field are also called application security testers, cyber assessment testers, cybersecurity engineers, and application security hackers.

    What certifications can help a penetration tester's career?

    Professionals can earn certifications such as the Certified Penetration Testing Consultant, Certified Penetration Testing Engineer, Certified Powershell Hacker, or the GIAC Red Team Professional.

    What are the main college majors for this career?

    Typical majors include computer science, computer and information sciences, security science and technology, and information technology administration.

    Sources and attribution

    Every figure on this page comes from these public datasets. Missing values are shown as not reported, never estimated.

    O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. CollegesRef has modified all or some of this information.

    Data from CareerOneStop, sponsored by the U.S. Department of Labor (Employment and Training Administration, with the Minnesota Department of Employment and Economic Development). Retrieved November 9, 2026.

    Page data updated November 5, 2026.