Resume guide · Job Zone 4

Penetration Testersresume guide.

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. A strong Penetration Testers resume shows critical thinking, reading comprehension and writing, and names the tools you have worked with, such as C, Microsoft Azure software and Microsoft PowerShell.

See how a parser reads your resumeFree, no card→

01Also called

O*NET
Cyber Systems EngineerSecurity ConsultantSecurity EngineerSystem Vulnerability AnalystThreat HunterVulnerability AssessorApplication Security AssessorApplication Security HackerApplication Security TesterCertified Tester

02Skills employers expect

O*NET

Importance is how much the skill matters to the job; level is how much of it the job demands. Both are worth naming on the resume, in this order.

SkillImportanceLevel
Critical ThinkingVery highAdvanced
Reading ComprehensionVery highAdvanced
WritingVery highAdvanced
Active ListeningHighAdvanced
Complex Problem SolvingHighIntermediate
ProgrammingHighAdvanced
Active LearningHighAdvanced
Systems EvaluationHighAdvanced
Judgment and Decision MakingHighAdvanced
MonitoringHighIntermediate

03Knowledge areas

O*NET
  • Computers and Electronics
  • Telecommunications
  • Engineering and Technology
  • English Language
  • Customer and Personal Service
  • Law and Government
  • Education and Training
  • Administration and Management
  • Public Safety and Security
  • Communications and Media

04Common responsibilities

O*NET

Ordered by importance. Each one is a bullet waiting for a result and a number.

  1. Document penetration test findings.
  2. Identify security system weaknesses, using penetration tests.
  3. Write audit reports to communicate technical and procedural findings and recommend solutions.
  4. Gather cyber intelligence to identify vulnerabilities.
  5. Maintain up-to-date knowledge of hacking trends.
  6. Keep up with new penetration testing tools and methods.
  7. Identify new threat tactics, techniques, or procedures used by cyber threat actors.
  8. Conduct network and security system audits, using established criteria.
  9. Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
  10. Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.

05Software and tools

O*NET

67 tools across 22 categories. The six largest categories are below; Hot marks a hot technology, In demand a tool employers ask for most often.

Development environment software12
  • CHotIn demand
  • Microsoft Azure softwareHotIn demand
  • Microsoft PowerShellHotIn demand
  • GoHotIn demand
  • RubyHot
  • Oracle Java 2 Platform Enterprise Edition J2EEHot
  • Software development toolsIn demand
  • Web application softwareIn demand
  • Microsoft Azure DevOps ServicesIn demand
  • Rust programming languageIn demand
  • Microsoft Visual Basic Scripting Edition VBScript
  • Software libraries
+ 7 more
Operating system software8
  • LinuxHotIn demand
  • UNIXHotIn demand
  • Apple macOSHotIn demand
  • Shell scriptHotIn demand
  • BashHotIn demand
  • Apple iOSHotIn demand
  • Google AndroidHotIn demand
  • Magellan FirmwareIn demand
+ 3 more
Transaction security and virus protection software7
  • MetasploitIn demand
  • Portswigger BurP SuiteIn demand
  • NmapIn demand
  • HP WebInspect
  • Rapid7 Nexpose
  • Invicti Acunetix
  • Rapid7 software
+ 2 more
Object or component oriented development software6
+ 1 more
Web platform development software5
  • JavaScriptHotIn demand
  • PHPHotIn demand
  • Microsoft Active Server Pages ASPHot
  • RESTful APIIn demand
  • Security assertion markup language SAML
Data base user interface and query software4
Application server software3
  • GitHubHotIn demand
  • DockerHotIn demand
  • KubernetesHotIn demand
Program testing software3
  • MITRE ATT&CK softwareIn demand
  • Kali LinuxIn demand
  • System testing software
Cloud-based management software2
  • Splunk EnterpriseHotIn demand
  • Google Cloud software
Cloud-based protection or security software2
  • Tenable NessusIn demand
  • Qualys Cloud PlatformIn demand
Compiler and decompiler software2
  • Hex-Rays IDA Pro
  • Vector 35 Binary Ninja
Network monitoring software2
  • Wireshark
  • IBM QRadar SIEM
Transaction server software2
  • Web server softwareIn demand
  • IBM Middleware
Computer aided design CAD software1
  • Ghidra
Configuration management software1
  • IBM TerraformHotIn demand
Data base management system software1
  • Database management systems
Enterprise resource planning ERP software1
  • Management information systems MIS
Expert system software1
  • Ansible softwareHotIn demand
Internet directory services software1
  • Microsoft Active DirectoryHotIn demand
Network security and virtual private network VPN equipment software1
  • Firewall softwareIn demand
Office suite software1
Spreadsheet software1

06Education and preparation

O*NET
Typical education
Bachelor's Degree
40% of surveyed workers. Others report Post-Secondary Certificate (20%) and High School Diploma or the equivalent (such as a GED) (15%).
Preparation level
Job Zone 4 · Considerable preparation
Usually a four-year degree and several years of related experience.

07Putting it on your resume

ResumeXRays guidance
BEE · How to show it

Lead with what you built. For a Job Zone 4 role, hiring managers and parsers both look for outcomes before credentials. Put two or three results at the top of each job entry, with the scale or effect stated plainly.

Name the tools exactly. This occupation is heavy on named software. A skills section that says "C, Microsoft Azure software, Microsoft PowerShell, Go" matches more job descriptions than a general phrase. Use the spelling employers use.

Show reading comprehension and writing, not just critical thinking. Reading comprehension and writing rank close to critical thinking for this occupation. One bullet per role that shows a decision, a tradeoff or a result covers them.

Run your resume through the free scan →

See your fitbefore youhit apply.

Drop your resume and see what a parser flags before you send it. Free, no card.

Analyze your resume free →$0 to start · No card · Free plan forever