Also referred to as:
Penetration and Vulnerability Analyst III, Security Threat Analyst III, Vulnerability Tester III
Requirements and Responsibilities
Penetration Tester III performs penetration testing to assess and identify security vulnerabilities of networks, applications, and systems. Conducts manual and automated penetration tests including black-box, gray-box, and white-box. Being a Penetration Tester III evaluates findings and performs root cause analysis to identify weaknesses, misconfigurations, or other flaws in the environment that could lead to security compromises. Documents testing results and presents suggestions for the development of countermeasures, security improvements, and mitigation strategies. Additionally, Penetration Tester III utilizes a variety of assessment tools, such as Nmap, BurpSuite, Kali Linux and scripting languages like Bash, Python, Perl, or Ruby. Familiar with red team testing protocols and cybersecurity frameworks like OWASP, OSSTMM and PTES. Stays up to date with the latest security threats, techniques, and tools to continuously improve penetration testing methodologies. Typically requires a bachelor's degree in computer science. May require Offensive Security Certified Professional (OSCP). May require SANS/ GIAC Certified Penetration Tester (GPEN). May require SANS/ GIAC Web Application Penetration Tester (GWAPT). Typically reports to a manager. The Penetration Tester III work is generally independent and collaborative in nature. Contributes to moderately complex aspects of a project. To be a Penetration Tester III typically requires 4-7 years of related experience.
Find out Job Distribution by:
