Penetration Testers, task by task.

The work this job is made of, grouped and scored on how much of its output software can produce today, then linked to what addresses it. What is left over is the job. The full activity list is underneath.

Also filed here45
  • hacker
  • tester
  • risk tester
  • cyber tester
  • cyber analyst
  • cyber assessor
  • ethical hacker
  • embedded tester
  • hardware hacker
  • security tester
  • certified hacker
  • certified tester
  • security engineer
  • penetration tester
  • and 31 more
SOC code
15-1299.04
Activities scored
6
In O*NET
18 activities
Activities an agent can take on
5
Grounded in
O*NET 30.3
The tasks · Penetration TestersSOC 15-1299.04
88% · agentMostly automatable
85% · agentMostly automatable
82% · agentMostly automatable
80% · agentMostly automatable
78% · agentMostly automatable
42% · you keepPartly automatable
The team5 agents · 5 need no setup
Reporting agent
Microsoft Office software · Microsoft Excel · Docs
● No integration needed
Test development agent
Python · Bash · GitHub
● No integration needed
Vulnerability analysis agent
Splunk Enterprise · Python · SQL
● No integration needed
Threat intelligence agent
Search · Web · Python
● No integration needed
Policy development agent
Docs · Microsoft Office software · ServiceNow
● No integration needed
You keep this
Approve final penetration test scope and authorize executionOwn accountability for security posture and risk decisionsLead stakeholder discussions on critical vulnerabilities and remediation prioritiesMake final judgment calls on threat severity and incident response

Automatability scores estimate how much of a task an agent can reliably do today, grounded in O*NET task data. They are not predictions of job loss.

Start with these three

The most automatable work in this job, and the one tool we would use for each. Every task has a page of its own with the reasoning and every occupation that does it.

Document findings and prepare technical reports88% · recording, documentation and administration · mostly automatable
Develop and execute penetration tests and simulations85% · drafting and content production · mostly automatable
Analyze security vulnerabilities and assess risks82% · analysis and evaluation work · mostly automatable

The full activity list

All 18 detailed work activities O*NET records for Penetration Testers, grouped by how much of each one software can take on. Every row has its own page.

Partly automatable 1

Partly automatable activities for Penetration Testers
ActivityJobs
Discuss design or technical features of products or services with technical personnel9

Barely automatable 2

Barely automatable activities for Penetration Testers
ActivityJobs
Develop organizational policies or programs31
Test performance of electrical, electronic, mechanical, or integrated systems or equipment30