Penetration Testers
SOC code 15-1299 · O*NET-SOC 15-1299.04 · Considerable preparation needed · Computer and IT
Bright Outlook — O*NET expects rapid growth and new and emerging for this occupation
Penetration Testers pay
U.S. national figures, May 2025 BLS survey · How we got this number
Median pay
$116,580
a year
Hourly
$56.05
per hour
The solid band is the middle 50% of workers; the bar spans the 10th to 90th percentile.
Average pay
$122,230
$58.77 per hour
Middle 50%
$79,370 – $157,500
25th to 75th percentile
Full spread
$55,940 – $188,470
10th to 90th percentile
People employed
435,370
nationwide
National U.S. figure, May 2025. Local pay can be higher or lower.
These pay and employment figures are for the broader BLS group “Computer Occupations, All Other”, not this job alone.
- 10th percentile
- $55,940
- $26.89/hr
- 25th percentile
- $79,370
- $38.16/hr
- Median percentile
- $116,580
- $56.05/hr
- 75th percentile
- $157,500
- $75.72/hr
- 90th percentile
- $188,470
- $90.61/hr
What does a penetration tester do?
Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.
The tasks that matter most day to day
- Document penetration test findings.
- Identify security system weaknesses, using penetration tests.
- Write audit reports to communicate technical and procedural findings and recommend solutions.
- Gather cyber intelligence to identify vulnerabilities.
- Maintain up-to-date knowledge of hacking trends.
- Keep up with new penetration testing tools and methods.
- Identify new threat tactics, techniques, or procedures used by cyber threat actors.
- Conduct network and security system audits, using established criteria.
How to become a penetration tester
Preparation level: zone 4 — Considerable preparation needed
- Education
- Most of these occupations require a four-year bachelor's degree, but some do not.
- Experience
- A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.
- Training
- Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training.
The federal survey did not capture education levels for this specific occupation, so the preparation-level card above is the best guide to the entry route.
Common questions
How much does a penetration tester earn?
The national median is $116,580 a year. The full range runs from $55,940 at the 10th percentile to $188,470 at the 90th — entry pay sits closer to the lower figure, and experience, licensing and specialisation move you up the range.
Can you become a penetration tester without a degree?
Not usually — this occupation sits in preparation zone 4, where the typical entry route is most of these occupations require a four-year bachelor's degree, but some do not. The education breakdown above shows what people in the role actually reported.
Skills and knowledge you need
Core skills
- Critical Thinking4.4/5
- Reading Comprehension4.0/5
- Writing4.0/5
- Active Listening3.9/5
- Active Learning3.6/5
- Monitoring3.5/5
Knowledge areas
- Computers and Electronics5.0/5
- Telecommunications4.2/5
- Engineering and Technology4.0/5
- English Language3.8/5
- Customer and Personal Service3.8/5
- Law and Government3.4/5
- Education and Training3.2/5
- Administration and Management3.1/5
Transferable strengths: Complex Problem Solving, Programming, Systems Evaluation, Judgment and Decision Making.