Professional penetration tester?
Hi,
Can someone please tell me if he had changed his career path to become a professional penetration tester, and can share some thoughts about it? Is that still viable profession while there are plenty of services outside that provide this? I used to have a gig on fiverr for penetration testing to websites and services, and I did some white hat hacking before, but, I don't know, I didn't saw that match of a traction around this, so, I wonder ...
Hi Meir,
It's my cup of tea so to speak, as I am working in the InfoSec industry (yes also pen-testing).
Global market is in shortage of "pen-testers", and generally people that have the know-how around InfoSec, and that are highly skilled and devoted to it. As @dogsbody already mentioned, Fiverr might not be the best place to look for these kind of services (well if you just need to check your WP configuration, that's something completely different...). Regarding the automated services... A lot of them are innovative and save you a lot of time and money, but they cannot replace a good "pen-tester", at least not yet. Believe me.
I highly recommend you, that if you are serious about this career path change, that you start studying CS in depth and not just focus on the "pen-testing" aspect.
In my opinion, a prerequisite for a great career in cybersecurity is a broad knowledge of CS. Break things, tear them apart, fix them, be curious, think outside of standard norms and boundaries and you're golden :) . I wish you best of luck!
Pen testing is still huge but I would say that fiverr is the wrong place for it. IMHO customers are looking for hand holding as opposed to the actual pen tests themselves which as you say can be automated 90% of the time.
We outsource our pen tests but spend many hours helping customers understand what the results mean to them. Compliance in particular isn't a case of "just do XYZ" and you'll be fine.
This comment was deleted 7 years ago