Home › Computer & Math › Penetration Testers

How a penetration tester can use AI, task by task

O*NET 15-1299.04: Penetration TestersMedian pay $116,580/year (BLS, May 2025)22 tasksJob Zone 4: Considerable preparation

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

Type your own title and every prompt on this page updates to match. Also called: Cyber Systems Engineer, Security Consultant, Security Engineer, System Vulnerability Analyst, Threat Hunter, Vulnerability Assessor.

Where AI fits in this job

AI-ready 57%AI-assist 42%Stays human 0%

Share of the job's tasks, weighted by how important and how frequent each task is (O*NET ratings). 12 AI-ready, 10 AI-assist and 0 human-led tasks out of 22. This measures where AI can help, not whether the job will disappear.

Information & paperwork
Thinking & planning
People & communication
Leading & teaching
Hands-on & physical

Shape of the job: importance of each kind of work activity (O*NET, 1 to 5).

🗓 Start here on Monday

The most frequent, most important tasks where AI can help right away.

  1. Maintain up-to-date knowledge of hacking trends.Stay sharp · Daily
  2. Gather cyber intelligence to identify vulnerabilities.Look into it · Daily
  3. Identify security system weaknesses, using penetration tests.Crunch the numbers · Daily

💪 Lean into these

Core tasks that stay human. These skills get more valuable as the routine work gets automated.

None of this job's listed tasks fall in this group.

AI can draft these 12

AI produces a usable first pass. You review it, fix it and own it.

Maintain up-to-date knowledge of hacking trends.

Daily

AI is a patient tutor for new rules and techniques.

Show prompt & steps

AI is a patient personal tutor. It explains new rules, techniques and technology at your level, quizzes you and builds a study plan.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to maintain up-to-date knowledge of hacking trends.

Context: The work draws on telecommunications, computers and electronics and engineering and technology.
Specialty: [penetration testing, other field]
What to cover: [tools, methods, trends]

Summarize recent developments, sources to follow and a practice exercise. Use examples from my line of work, quiz me with 5 questions one at a time, and list trustworthy sources.

10-minute exercise: Specialist update

Step 1Pick a real example: the next time you maintain up-to-date knowledge of hacking trends (today).
Step 2Fill in [Specialty] and [What to cover] with the real details, then run the prompt.
Step 3Check one claim against an official or professional source.

AI's knowledge has a cutoff date. For new regulations and standards, always confirm against the official source.

Importance 4.5/5 · core task · O*NET work activity: Stay informed about current developments in field of specialization..

Gather cyber intelligence to identify vulnerabilities.

Daily

AI maps out the topic and options; confirm with real sources.

📊 Real AI use (Anthropic Economic Index, Apr 2026 to May 2026): AI completed the task directly in 89% of those conversations; the rest were back-and-forth with the person.

Show prompt & steps

AI is a fast research assistant. Ask it to map out a topic, compare options or list what to check. Use a tool with web search and ask for its sources.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to gather cyber intelligence to identify vulnerabilities.

Context: The work draws on telecommunications, computers and electronics and engineering and technology.
What I need: [the specific information]
Where I can search: [files, databases, references]

Give me a search plan with terms and sources in order of likely success, and how to confirm the result. Flag where information may be outdated.

10-minute exercise: Search references for an answer

Step 1Pick something you need to look up this week.
Step 2Fill in [What I need] and [Where I can search].
Step 3Run the plan and check the result against a second source.

AI can invent sources and citations. Open every link and confirm it says what the AI claims.

Importance 4.6/5 · core task · O*NET work activity: Search files, databases or reference materials to obtain needed information..

Document penetration test findings.

Weekly

AI turns complex material into plain-language handouts.

📊 Real AI use (Anthropic Economic Index, Apr 2026 to May 2026): AI completed the task directly in 65% of those conversations; the rest were back-and-forth with the person.

Show prompt & steps

AI is great at turning complicated material into plain-language guides, handouts, FAQs and how-tos for a specific audience. You check it's accurate.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to document penetration test findings.

Context: The work draws on telecommunications, computers and electronics and engineering and technology.
Topic: [traffic, test findings]
Data: [paste]

Draft the report. Use plain language, one everyday analogy, and the questions people are most likely to ask with short answers.

10-minute exercise: Operational report

Step 1Pick a real example: the next time you document penetration test findings (this week).
Step 2Fill in [Topic] and [Data] with the real details, then run the prompt.
Step 3Check every answer is right for your workplace before you share it.

Rules, prices and policies change. Make sure AI is working from your current official version.

Importance 4.8/5 · core task · O*NET work activity: Prepare technical or operational reports..

Keep up with new penetration testing tools and methods.

Daily

AI is a patient tutor for new rules and techniques.

Show prompt & steps

AI is a patient personal tutor. It explains new rules, techniques and technology at your level, quizzes you and builds a study plan.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to keep up with new penetration testing tools and methods.

Context: The work draws on telecommunications, computers and electronics and engineering and technology.
Specialty: [penetration testing, other field]
What to cover: [tools, methods, trends]

Summarize recent developments, sources to follow and a practice exercise. Use examples from my line of work, quiz me with 5 questions one at a time, and list trustworthy sources.

10-minute exercise: Specialist update

Step 1Pick a real example: the next time you keep up (today).
Step 2Fill in [Specialty] and [What to cover] with the real details, then run the prompt.
Step 3Check one claim against an official or professional source.

AI's knowledge has a cutoff date. For new regulations and standards, always confirm against the official source.

Importance 4.5/5 · core task · O*NET work activity: Stay informed about current developments in field of specialization..

Write audit reports to communicate technical and procedural findings and recommend solutions.

Weekly

AI turns complex material into plain-language handouts.

Show prompt & steps

AI is great at turning complicated material into plain-language guides, handouts, FAQs and how-tos for a specific audience. You check it's accurate.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to write audit reports to communicate technical and procedural findings and recommend solutions.

Context: The work draws on telecommunications, computers and electronics and engineering and technology.
Analysis: [describe]
Results: [paste tables, maps]

Draft the report narrative. Use plain language, one everyday analogy, and the questions people are most likely to ask with short answers.

10-minute exercise: Analytical report

Step 1Pick a real example: the next time you write audit reports to communicate technical and procedural findings (this week).
Step 2Fill in [Analysis] and [Results] with the real details, then run the prompt.
Step 3Check every answer is right for your workplace before you share it. Confirm the rules against the current official source.

Rules, prices and policies change. Make sure AI is working from your current official version.

Rules and regulations vary by place and change often. Confirm against the official source before relying on anything.

Importance 4.6/5 · core task · O*NET work activity: Prepare analytical reports..

Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.

Weekly

AI writes the first draft from your notes; you check every fact.

Show prompt & steps

Give AI your rough notes, numbers or last version and it will turn them into a clean, well-structured first draft. You check every fact and figure before it goes anywhere.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.

System: [network, data warehouse, hardware]
What to test: [functions, integration]

Draft test procedures, cases and expected results. Use plain language and headings where they help, and mark anything you had to guess with [CHECK].

10-minute exercise: Test procedure

Step 1Pick a real example: the next time you develop security penetration testing processes (this week).
Step 2Fill in [System] and [What to test] with the real details, then run the prompt.
Step 3Run the procedure once and fix unclear steps.

AI will happily make up numbers, names and dates. Every fact in the draft needs checking against your source.

Importance 4.4/5 · core task · O*NET work activity: Develop testing routines or procedures..

Conduct network and security system audits, using established criteria.

Weekly

AI finds trends and writes the spreadsheet formulas.

📊 Real AI use (Anthropic Economic Index, Apr 2026 to May 2026): AI completed the task directly in 79% of those conversations; the rest were back-and-forth with the person. This label was updated from real usage data.

Show prompt & steps

Paste a spreadsheet or table and ask AI to find trends, outliers and totals, or to write the formula you need. It's like having an analyst on call.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to conduct network and security system audits, using established criteria.

Context: We use Microsoft Excel and Firewall software; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [network, application, data store]
Evidence: [paste logs, scan results, no secrets]

Identify breaches or weaknesses, severity, and remediation steps. Show your working step by step and give spreadsheet formulas so I can reproduce the numbers.

10-minute exercise: Security analysis

Step 1Pick a real example: the next time you conduct network and security system audits (this week).
Step 2Fill in [System] and [Evidence] with the real details, then run the prompt.
Step 3Verify each finding in the original data. Confirm the rules against the current official source.

AI makes arithmetic mistakes. Recompute anything that matters with a spreadsheet formula.

Rules and regulations vary by place and change often. Confirm against the official source before relying on anything.

Importance 4.4/5 · core task · O*NET work activity: Analyze security of systems, network, or data..

Prepare and submit reports describing the results of security fixes.

Weekly

AI turns complex material into plain-language handouts.

Show prompt & steps

AI is great at turning complicated material into plain-language guides, handouts, FAQs and how-tos for a specific audience. You check it's accurate.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to prepare and submit reports describing the results of security fixes.

Context: We use Firewall software and Tenable Nessus; the work draws on telecommunications, computers and electronics and engineering and technology.
Topic: [status, results, fixes]
Audience: [customers, staff]
Notes: [paste]

Draft slides outline and speaker notes. Use plain language, one everyday analogy, and the questions people are most likely to ask with short answers.

10-minute exercise: Technical presentation

Step 1Pick a real example: the next time you prepare and submit reports describing the results of security fixes (this week).
Step 2Fill in [Topic], [Audience] and [Notes] with the real details, then run the prompt.
Step 3Check every answer is right for your workplace before you share it.

Rules, prices and policies change. Make sure AI is working from your current official version.

Importance 4.1/5 · core task · O*NET work activity: Prepare scientific or technical reports or presentations..

Develop and execute tests that simulate the techniques of known cyber threat actors.

Weekly

AI writes the first draft from your notes; you check every fact.

Show prompt & steps

Give AI your rough notes, numbers or last version and it will turn them into a clean, well-structured first draft. You check every fact and figure before it goes anywhere.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to develop and execute tests that simulate the techniques of known cyber threat actors.

System: [network, data warehouse, hardware]
What to test: [functions, integration]

Draft test procedures, cases and expected results. Use plain language and headings where they help, and mark anything you had to guess with [CHECK].

10-minute exercise: Test procedure

Step 1Pick a real example: the next time you develop and execute tests (this week).
Step 2Fill in [System] and [What to test] with the real details, then run the prompt.
Step 3Run the procedure once and fix unclear steps.

AI will happily make up numbers, names and dates. Every fact in the draft needs checking against your source.

Importance 4.1/5 · core task · O*NET work activity: Develop testing routines or procedures.. Also involves: Test performance of electrical, electronic, mechanical, or integrated systems or equipment..

Develop infiltration tests that exploit device vulnerabilities.

Weekly

AI writes the first draft from your notes; you check every fact.

Show prompt & steps

Give AI your rough notes, numbers or last version and it will turn them into a clean, well-structured first draft. You check every fact and figure before it goes anywhere.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to develop infiltration tests that exploit device vulnerabilities.

System: [network, data warehouse, hardware]
What to test: [functions, integration]

Draft test procedures, cases and expected results. Use plain language and headings where they help, and mark anything you had to guess with [CHECK].

10-minute exercise: Test procedure

Step 1Pick a real example: the next time you develop infiltration tests (this week).
Step 2Fill in [System] and [What to test] with the real details, then run the prompt.
Step 3Run the procedure once and fix unclear steps.

AI will happily make up numbers, names and dates. Every fact in the draft needs checking against your source.

Importance 3.8/5 · core task · O*NET work activity: Develop testing routines or procedures..

Design security solutions to address known device vulnerabilities.

Monthly

AI writes the first draft from your notes; you check every fact.

Show prompt & steps

Give AI your rough notes, numbers or last version and it will turn them into a clean, well-structured first draft. You check every fact and figure before it goes anywhere.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to design security solutions to address known device vulnerabilities.

Area: [online transactions, health data]
Rules: [regulations, standards]

Draft a policy with controls and responsibilities. Use plain language and headings where they help, and mark anything you had to guess with [CHECK].

10-minute exercise: Security or privacy policy

Step 1Pick a real example: the next time you design security solutions.
Step 2Fill in [Area] and [Rules] with the real details, then run the prompt.
Step 3Check every fact, name and number against your source before it goes anywhere.

AI will happily make up numbers, names and dates. Every fact in the draft needs checking against your source.

Importance 3.8/5 · core task · O*NET work activity: Develop computer or information security policies or procedures..

Update corporate policies to improve cyber security.

A few times a year

AI writes the first draft from your notes; you check every fact.

Show prompt & steps

Give AI your rough notes, numbers or last version and it will turn them into a clean, well-structured first draft. You check every fact and figure before it goes anywhere.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to update corporate policies to improve cyber security.

Program: [public information, fundraising, other]
Goals and rules: [what it must achieve, constraints]

Draft a policy with purpose, scope, procedures, roles and review date. Mark anything you had to guess with [CHECK].

10-minute exercise: Draft a policy or program

Step 1Pick a real example: the next time you update corporate policies to improve cyber security.
Step 2Fill in [Program] and [Goals and rules] with the real details, then run the prompt.
Step 3Fix every [CHECK] and review the draft with the people affected.

AI will happily make up numbers, names and dates. Every fact in the draft needs checking against your source.

Importance 3.9/5 · core task · O*NET work activity: Develop organizational policies or programs..

AI can help you prep these 10

AI speeds up the prep, drafting or thinking. The core of the task is still yours.

Identify security system weaknesses, using penetration tests.

Daily

AI does the arithmetic and suggests what to look at; the conclusions are yours.

📊 Real AI use (Anthropic Economic Index, Apr 2026 to May 2026): AI completed the task directly in 84% of those conversations; the rest were back-and-forth with the person.

Show prompt & steps

AI can do the arithmetic, build the spreadsheet formula and suggest what to look at. Deciding what the numbers mean for your situation is still you.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to identify security system weaknesses, using penetration tests.

Context: We use Microsoft Excel and Firewall software; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [network, application, data store]
Evidence: [paste logs, scan results, no secrets]

Identify breaches or weaknesses, severity, and remediation steps. Show your working step by step and give spreadsheet formulas so I can reproduce the numbers.

10-minute exercise: Security analysis

Step 1Pick a real example: the next time you identify security system weaknesses (today).
Step 2Fill in [System] and [Evidence] with the real details, then run the prompt.
Step 3Verify each finding in the original data.

AI makes arithmetic mistakes. Recompute anything that matters with a spreadsheet formula.

Importance 4.7/5 · core task · O*NET work activity: Analyze security of systems, network, or data..

Identify new threat tactics, techniques, or procedures used by cyber threat actors.

Daily

AI gets you up to speed; confirm findings with records or people.

Show prompt & steps

AI can get you up to speed fast and suggest where to look, but you need to confirm findings against real sources, records or people.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to identify new threat tactics, techniques, or procedures used by cyber threat actors.

Context: The work draws on telecommunications, computers and electronics and engineering and technology.
What we've seen: [indicators, behaviour, logs, no personal data]
Our environment: [systems, sector]

Match these indicators to known tactics or schemes, suggest what else to look for, and list containment or reporting steps. Cite public frameworks or advisories I can verify.

10-minute exercise: Research a threat or suspicious activity

Step 1Pick a real example: the next time you identify new threat tactics, techniques and procedures used (today).
Step 2Describe it in [What we've seen] and fill in [Our environment].
Step 3Verify each tactic it names against the public source before acting.

AI can invent sources and citations. Open every link and confirm it says what the AI claims.

Importance 4.4/5 · core task · O*NET work activity: Investigate illegal or suspicious activities..

Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.

Weekly

AI drafts scripts and configs; design and security are yours.

Show prompt & steps

AI can draft configurations, scripts and test cases and explain unfamiliar systems. Architecture and security decisions need your expertise.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to test the security of systems by attempting to gain access to networks, Web-based applications, or computers.

Context: We use C and Microsoft Azure software; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [application, network, data processing]
Risks: [what could fail]

Write test cases covering function, performance and security, with expected results and scripts. Propose the approach first, then the code with comments and tests, and point out security risks.

10-minute exercise: System test plan

Step 1Pick a real example: the next time you test the security of systems (this week).
Step 2Fill in [System] and [Risks] with the real details, then run the prompt.
Step 3Run the tests yourself and read every line before you'd use it.

Don't paste secrets, passwords or proprietary code into tools your employer hasn't approved.

Importance 4.4/5 · core task · O*NET work activity: Test computer system operations to ensure proper functioning..

Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.

Weekly

AI does the arithmetic and suggests what to look at; the conclusions are yours.

Show prompt & steps

AI can do the arithmetic, build the spreadsheet formula and suggest what to look at. Deciding what the numbers mean for your situation is still you.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.

Context: We use Microsoft Excel; the work draws on telecommunications, computers and electronics and engineering and technology.
Test: [vulnerability scan, design test, equipment test]
Results: [paste]

Interpret results, rank issues, and suggest next steps. Show your working step by step and give spreadsheet formulas so I can reproduce the numbers.

10-minute exercise: Interpret test results

Step 1Pick a real example: the next time you evaluate vulnerability assessments of local computing environments, networks (this week).
Step 2Fill in [Test] and [Results] with the real details, then run the prompt.
Step 3Recompute the most important number yourself before you trust the rest.

AI makes arithmetic mistakes. Recompute anything that matters with a spreadsheet formula.

Importance 4.3/5 · core task · O*NET work activity: Interpret design or operational test results..

Discuss security solutions with information technology teams or management.

Weekly

AI drafts clear messages and talking points.

Show prompt & steps

AI can draft updates, emails and talking points so your message is clear and complete. Relationships and real-time calls are yours.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to discuss security solutions with information technology teams or management.

Context: We use Firewall software and Tenable Nessus.
Topic: [security, system design]
Who: [IT, architects]

Draft talking points and questions. Keep it under 150 words with a clear ask, plus a 2-sentence version for chat.

10-minute exercise: Technical discussion prep

Step 1Pick a real example: the next time you discuss security solutions (this week).
Step 2Fill in [Topic] and [Who] with the real details, then run the prompt.
Step 3Edit it until it sounds like you, then send it yourself.

Never let AI send messages for you. Read every word, because tone mistakes cost trust.

Importance 4.0/5 · core task · O*NET work activity: Discuss design or technical features of products or services with technical personnel..

Collect stakeholder data to evaluate risk and to develop mitigation strategies.

Monthly

AI does the arithmetic and suggests what to look at; the conclusions are yours.

Show prompt & steps

AI can do the arithmetic, build the spreadsheet formula and suggest what to look at. Deciding what the numbers mean for your situation is still you.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to collect stakeholder data to evaluate risk and to develop mitigation strategies.

Context: We use Microsoft Excel; the work draws on telecommunications, computers and electronics and engineering and technology.
Operation: [security, facility]
Incidents: [paste history]

Identify risks and response plans. Show your working step by step and give spreadsheet formulas so I can reproduce the numbers.

10-minute exercise: Loss prevention risk review

Step 1Pick a real example: the next time you collect stakeholder data to evaluate risk and to develop.
Step 2Fill in [Operation] and [Incidents] with the real details, then run the prompt.
Step 3Recompute the most important number yourself before you trust the rest.

AI makes arithmetic mistakes. Recompute anything that matters with a spreadsheet formula.

Importance 3.9/5 · core task · O*NET work activity: Analyze risks to minimize losses or damages..

Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.

Weekly

AI gets you up to speed; confirm findings with records or people.

Show prompt & steps

AI can get you up to speed fast and suggest where to look, but you need to confirm findings against real sources, records or people.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.

Context: We use Firewall software and Tenable Nessus; the work draws on telecommunications, computers and electronics and engineering and technology.
Incident: [what happened, systems or records involved]
Data available: [logs, transactions, images, records]

Propose a step-by-step forensic review: what to preserve first, what to look for in each data source, tools commonly used, and red flags. Remind me of chain-of-custody steps.

10-minute exercise: Forensic review plan

Step 1Take a closed incident you know the answer to.
Step 2Describe it in [Incident] and list sources in [Data available].
Step 3Did its plan lead toward the real cause? Use that to judge it on live cases.

AI can invent sources and citations. Open every link and confirm it says what the AI claims.

Importance 3.9/5 · core task · O*NET work activity: Examine records or other types of data to investigate criminal activities..

Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.

Monthly

AI gets you up to speed; confirm findings with records or people.

Show prompt & steps

AI can get you up to speed fast and suggest where to look, but you need to confirm findings against real sources, records or people.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.

Context: We use Firewall software and Tenable Nessus; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [servers, medical device, equipment]
Criteria: [safety, efficiency, security]

Make an evaluation plan and scoring table. Give sources I can check and say clearly when you're unsure.

10-minute exercise: Equipment or system evaluation

Step 1Pick a real example: the next time you assess the physical security of servers and systems.
Step 2Fill in [System] and [Criteria] with the real details, then run the prompt.
Step 3Open two of the sources it gives and confirm the key claim before you use it.

AI can invent sources and citations. Open every link and confirm it says what the AI claims.

Importance 3.9/5 · core task · O*NET work activity: Evaluate characteristics of equipment or systems..

Develop presentations on threat intelligence.

Monthly

AI helps you prepare clearer wording and likely questions.

Show prompt & steps

Use AI to prepare: simpler wording, analogies, likely questions and a one-page handout. The conversation itself is yours.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to develop presentations on threat intelligence.

Context: The work draws on telecommunications, computers and electronics and engineering and technology.
Topic: [status, results, fixes]
Audience: [customers, staff]
Notes: [paste]

Draft slides outline and speaker notes. Use plain language, one everyday analogy, and the questions people are most likely to ask with short answers.

10-minute exercise: Technical presentation

Step 1Pick a real example: the next time you develop presentations.
Step 2Fill in [Topic], [Audience] and [Notes] with the real details, then run the prompt.
Step 3Check every answer is right for your workplace before you share it.

Rules, prices and policies change. Make sure AI is working from your current official version.

Importance 3.3/5 · core task · O*NET work activity: Prepare scientific or technical reports or presentations..

Configure information systems to incorporate principles of least functionality and least access.

Monthly

AI drafts scripts and configs; design and security are yours.

📊 Real AI use (Anthropic Economic Index, Apr 2026 to May 2026): AI completed the task directly in 57% of those conversations; the rest were back-and-forth with the person.

Show prompt & steps

AI can draft configurations, scripts and test cases and explain unfamiliar systems. Architecture and security decisions need your expertise.

Ready-to-use prompt

I work as a penetration tester. Part of my job is to configure information systems to incorporate principles of least functionality and least access.

Context: We use C and Microsoft Azure software; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [backup, security, information system]
Requirements: [users, data, controls]

Propose architecture, components and a rollout plan. Propose the approach first, then the code with comments and tests, and point out security risks.

10-minute exercise: System design

Step 1Pick a real example: the next time you configure information systems.
Step 2Fill in [System] and [Requirements] with the real details, then run the prompt.
Step 3Run the tests yourself and read every line before you'd use it.

Don't paste secrets, passwords or proprietary code into tools your employer hasn't approved.

Importance 3.4/5 · core task · O*NET work activity: Develop computer or information systems..

These stay human 0

They need your hands, your presence or your accountable judgment. Lean into them: they get more valuable as routine work is automated.

📏 Measured in this job (O*NET work context): Impact of decisions: important results · Face-to-face discussions: once a week or more but not every day · Contact with others: contact with others most of the time · Frequency of decisions: once a week or more but not every day

None of this job's tasks are here.

Get the full prompt pack for Penetration Testers

Every task, prompt and 10-minute exercise on this page in one PDF, formatted to print or keep on your desktop. Free.

Where should we send your PDF?

Your Penetration Testers prompt pack downloads straight away, and a copy goes to your inbox.

We'll also send occasional updates about this playbook. Unsubscribe anytime. Privacy

Your next moves

Skills to build

From O*NET's ratings of how important each skill is in this job, matched to which part of the work it supports.

With AI Use these to work with AI

When AI does the first draft, these are the skills you use to brief it and check what comes back.

  • Reading Comprehensionimportance 4.0/5
    Used in: Analyzing Data or Information
  • Critical Thinkingimportance 4.4/5
    Used in: Analyzing Data or Information
  • Writingimportance 4.0/5
    Used in: Documenting/Recording Information
  • Active Listeningimportance 3.9/5
    Used in: Getting Information

Where you could move

Related jobs from O*NET with the closest skill profile, favouring ones where more of the work stays human. No step down in preparation.

  • Information Security Analysts7% human-led · Same preparation · $129,180/yr · usually bachelor's degreeSkills to build: Operations Monitoring
  • Computer Network Architects13% human-led · Same preparation · $134,050/yr · usually bachelor's degreeSkills to build: Technology Design, Instructing, Operations Monitoring

Getting into this job

O*NET has not surveyed education and training for this occupation yet.

Software in this job

In-demand tools from O*NET. Many now have AI built in, so check what yours can do before adding a new tool.

Amazon Web Services AWS softwareAnsible softwareApple iOSApple macOSBashCC#C++DockerGitHubGoGoogle Android