Ethical Hacker (Penetration Tester)

Also called: Pen Tester, Red Team Operator, White-Hat Hacker

Gets hired to break into companies' computer systems legally, before criminals do.

A day in the life

Pen testers probe websites, networks, and even office buildings for weaknesses, sometimes picking locks or tricking staff with fake emails (with permission), then write reports explaining how to fix the holes. Some freelance as hackers-for-hire on bug bounty programs.

Pay over a career

Starting
$70k
Typical
$125k
High
$190k

Based on BLS information security analysts median (~$125k).

Training

Bachelor's degree (4-year), about 4 years after high school. Bachelor's in cybersecurity or computer science helps, but many are self-taught with certifications like OSCP; capture-the-flag competitions build skill.

Ways in: 4-year college, Certification, Self-taught, Military. Training cost: $15k – $60k.

Majors to look at: Cybersecurity, Computer Science, Information Technology.

Outlook

Growing much faster than average (about 29% over 10 years). BLS projects about 29% growth for information security analysts (2024-34).

Will it last? Our AI estimate

Medium risk for 10 years. AI agents now run scans and find common bugs, squeezing junior pen-test work; creative attack chains and social engineering stay human.

Start now, in high school

Classes: Computer Science, AP CS Principles, Math, Networking CTE.

Official data: O*NET occupation 15-1212.

More Investigation & Mystery careers

Career Universe is an early version. Pay, training and AI-risk figures are estimates to start your own research, not verified facts. The research was written with AI research assistants, checked by validation scripts and spot-checked by hand. Check anything important with schools, employers and official sources. How the numbers work.