Pentester

Cybersecurity Business; United States; On-site; USD 38,593 - 74,614; Full time

Job summary

A leading cybersecurity firm is seeking a skilled pentester to conduct controlled penetration tests and ensure the security of its systems. The ideal candidate will analyze vulnerabilities, recommend improvements, and work alongside IT teams to enhance compliance. A bachelor's degree in computer science or cybersecurity is essential, alongside experience in security audits. The role offers a competitive salary starting at €3,000 with potential earnings exceeding €5,000. Opportunities exist in various sectors, including public and industrial.

Qualifications

• Experience in performing controlled penetration tests.
• Ability to present vulnerabilities and recommend solutions.
• Knowledge of cybersecurity strategies and compliance regulations.

Responsibilities

• Conduct audits of security systems.
• Analyze and present security vulnerabilities.
• Perform intrusion tests and develop audit tools.

Skills

Security of operating systems

Knowledge of norms and standards

Intrusion mission execution

Reverse engineering

IT law knowledge

Software development skills

Fluency in English

Education

Bachelor in Computer Science or Cybersecurity

Master in Cybersecurity

Job description

Education level: Bac +3
Employability: Very good
Starting salary: €3,000
Confirmed salary: €5,000
Mobility: Good
ROME Code: M1802
DPF code: M2Z

SUMMARY

• The position in a nutshell
• Tasks
• Responsibility of the cybersecurity administrator
• Skills
• Salary
• In which sector to work?
• How do I access the profession?

The position in a nutshell

This IT security professional tests networks by performing controlled penetration tests to identify security vulnerabilities. It thus offers alert levels that allow teams to define cybersecurity strategies and solutions.

Equivalent title: Technical security auditor, technical expert in security audit, IT auditor, expert in intrusion tests

Tasks

The role of a pentester is to ensure the security of the entire architecture of a computer system. Its main missions focus on three key areas.

Conducting audits

• Have a global vision of the IS audited
• Perform security audits in accordance with the regulations of each IT environment tested
• Perform configuration audits, i.e. collect and analyze equipment configuration items
• Carry out architecture audits, by collecting and processing data from the architecture of an IS
• Conduct code audits by reviewing component source code
• Launch intrusion tests, i.e. attacks defined by well‑thought‑out scenarios for each target environment

Management of technical checks

• Present the detected vulnerabilities to the teams and organize them according to the degree of importance, defined according to their impacts
• Analyze vulnerabilities and identify their causes in educational reports
• Recommend appropriate solutions or strategies to fill the detected flaws
• Work with IT teams to facilitate the application of recommendations
• Submit security and compliance level dashboards

Technical watch

• Carry out a permanent watch to be at the forefront of attack scenarios, threats and failures by environment
• Stay alert to new test contexts to improve strategies
• Develop audit tools
• Innovate on IS flaw detection solutions.

Our advice: Having a PASSI certification, Information systems security audit service provider, is an asset to move towards this profession of expert in intrusion tests.

Responsibility of the pentester

His role is important within a company or an organization, because the pentester knows all the ways to penetrate a computer system. Only he does it to improve it, not to divert it. Often subject to a confidentiality agreement, his work is a major challenge for the structures that give him access to all their vulnerabilities. He may therefore also be called upon to carry out awareness-raising or prevention missions to improve the knowledge of his team.

Skills

A pentester must show great rigor and an ever more advanced technique. This requires some essential skills to effectively practice this profession.

Know how

Technique is as important as theory in this position. Experience continues to improve the approaches of the penetration testing expert. He must :

• master the security of operating systems, networks and protocols;
• know the norms and standards of the environments for its audits;
• know how to carry out various intrusion missions, with a good knowledge of the techniques and possible flaws;
• be competent in reverse engineering;
• have legal skills in IT law, IS security and personal data protection;
• have skills in software development and programming language;
• be fluent in English.

Know-how

The pentester is a key position for a company, which must be able to trust him completely. There are certain qualities to possess:

• sense of ethics;
• curiosity and audacity;
• pedagogy and diplomacy;
• confidentiality and integrity;
• The ability to work in a team.

If the pentester works for a big box, for example in the United States, where the sector is known to be more paid, his salary differs greatly from a contract in France. That said, this penetration testing expert can consider an average salary starting at €3,000. With experience, the average salary exceeds €5,000 per month. This can go up to €8,800, for example.

In which sector to work?

The profession of pentester is in great demand by companies because it represents a significant asset and security for their operations. The public, industrial or banking sector will be looking for these experts. Where to work as a pentester?

• SNCF;
• Keolis;
• Cogiceo;
• Atos;
• Airbus;
• Thales.

Description of the profession in the ANSSI directory

This profession is developing within organizations that have a SOC-type structure.

To become a pentester, you must first of all justify a good level in computer science. This can range from a bachelor's degree with a specialization in computer science to a master's degree in cybersecurity.

Bachelor Cybersecurity specialist

Level 6 title “Cybersecurity Specialist” RNCP37987. Date obtained: 20-09-2023

1 year

The perfect path for the technical professions of cybersecurity. At your entrance, select your specialty (IT - IT or Industrial - OT) and start the adventure! Gateways exist for people who have already validated training related to the world of cyber or wrongly judged "distant" from the world of cyber

Master Cybersecurity manager

RNCP38463 level 7 title "Expert in the development of cybersecurity solutions". Date obtained: 12/21/2023

2 years

RNCP38463 level 7 title "Expert in the development of cybersecurity solutions". Date obtained: 12/21/2023

This 2-year program allows you to master the fundamental skills required for the role of cybersecurity manager and promote your professional integration. Its cost of €15,000 net of tax per year is fully covered by our partner companies. CSB.SCHOOL is authorized to train and organize the assessment of the Level 7 Professional Title Expert in the development of cybersecurity solutions RNCP number 38463 under the authority of AN21.

The complete career guide

Our school provides training in 21 cybersecurity jobs, from technical to supervising positions, from IT operations to industrial systems security. Here is the list of jobs you will be trained for by attending one of our training programs.