Skip to content
sec/atlas
all careers

careers

Penetration Tester

Break things on purpose, with permission, and leave them stronger.

A penetration tester performs authorized, scoped tests to find and demonstrate weaknesses in applications, networks and cloud environments. The craft is method plus judgment: knowing what to test, proving impact with the least access needed, and writing a report that gets fixed.

see this path on the journey map

A day in the job

  • Agree on scope and rules of engagement before touching anything.
  • Map the attack surface and test authentication, authorization and input handling.
  • Demonstrate impact safely and record reproducible evidence.
  • Write findings with clear remediation and verify fixes in a retest.
0 of 11 studiedNext topic: Authorization, scope and ethics

  1. Stage 1· Foundations

    Learn the ethics, the method and the most common web weaknesses.

    Study here

    Learn elsewhere

    • How the web works: HTTP, sessions, cookies, APIs
    • Linux command line and one scripting language

    Build this

    Set up a deliberately vulnerable lab you own, write a rules-of-engagement document for it and find two issues.

  2. Stage 2· Practitioner

    Test applications and APIs methodically and report well.

    Study here

    Learn elsewhere

    • An intercepting proxy such as Burp Suite or ZAP
    • Network scanning and service enumeration

    Build this

    Test a vulnerable API with two accounts, write three findings in the template and retest after fixing them.

  3. Stage 3· Advanced

    Chain weaknesses and understand the defender's view.

    Study here

    Learn elsewhere

    • Active Directory and cloud attack paths in a lab
    • Reading source code for security flaws

    Build this

    Map an attack path in a lab environment, write how it would be detected, and propose the fix.

What to show

  • Two redacted or lab-based reports using a clear finding template with evidence and remediation.
  • Write-ups of lab or CTF challenges that explain the method, not only the answer.

Certifications (examples)

  • OSCP (OffSec)
  • PNPT (TCM Security)
  • GPEN (GIAC)
  • eJPT (INE)

Examples, not endorsements or requirements. Check the issuer for current details.

Related roles