Penetration Testers Career, Salary and Skills

Penetration Testers have a BLS-reported national median annual wage of $116,580 based on the 2025 OEWS dataset, with reported national employment of 435,370. Wage data is published for 396 locations.

Occupation description

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

O*NET code

15-1299.04

Job zone

4

Typical education

Not recorded

Experience

Over 2 years, up to and including 4 years

National salary and employment

Median annual

$116,580

Hourly median

$56.05

Employment

435,370

Data year

2025

National salary distribution

$55,940
10th
$79,370
25th
$116,580
Median
$157,500
75th
$188,470
90th

Top skills

All skill ratings →

Typical tasks

  • Document penetration test findings.
  • Identify security system weaknesses, using penetration tests.
  • Write audit reports to communicate technical and procedural findings and recommend solutions.
  • Gather cyber intelligence to identify vulnerabilities.
  • Maintain up-to-date knowledge of hacking trends.
  • Keep up with new penetration testing tools and methods.
  • Identify new threat tactics, techniques, or procedures used by cyber threat actors.
  • Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
All task statements →

Technology

  • Amazon Web Services AWS software
  • Ansible software
  • Apple iOS
  • Apple macOS
  • Bash
  • C
  • C#
  • C++
  • Database management systems
  • Docker
  • Firewall software
  • Ghidra
  • GitHub
  • Go
All technology →

Penetration Testers salary by location

Areas with the highest reported employment for this occupation.

All 396 locations →

Related careers

Career and skills data: O*NET 31.0 (onetcenter.org). Salary and employment data: U.S. Bureau of Labor Statistics OEWS, 2025 (bls.gov/oes). Figures are published survey estimates, not real-time market data.