In this lab, you will complete the following objectives:
- Conduct a Penetration Tester Job Search
- Analyze Penetration Tester Job Requirements
- Discover Resources to Further Your Career
When preparing for any career, it is important to understand the job market. Internet job boards provide insight into the qualifications, certifications, skills, and tasks associated with the roles you're interested in. This is especially relevant for careers in penetration testing and ethical hacking. You'll explore job postings to identify the skills, certifications, and experience required for these positions.
You'll also see which companies are hiring, where they're located, and gather essential insights into the requirements for penetration testers.
- Kali VM customized for the Ethical Hacker course
- Internet access
In this section, you will conduct a search for ethical hacking or penetration tester and Digital Forensic jobs on various internet job boards.
- Open a browser and search for ethical hacking/penetration testing and Digital Forensic jobs on employment sites such as indeed.com, glassdoor.com, linkedin.com, and monster.com.
- Use at least three different job boards to gather your results. Focus on entry-level jobs, but feel free to explore more senior positions.
- Find five jobs that seem interesting and relevant to you.
- Complete Table 1: Jobs Table with the details of the jobs you find.
| Job Title | Company Name | Level (Entry, Mid, Senior) | Location | Internet Job Board Source |
|---|---|---|---|---|
| Example | XYZ Corp | Entry-Level | Remote | Indeed |
- Open each job in a new tab or bookmark them to easily reference them for the next part of the lab.
Now that you’ve collected a set of job postings, you'll analyze the required qualifications, skills, and experience for each position.
- Copy the Job Title entries from Table 1 into Table 2 below.
- Summarize the duties for each job by reviewing the job descriptions.
- Identify the skills required, focusing on pentesting-related skills but also any general skills.
- Complete the Required Experience column. Focus on the experience listed and filter for entry-level positions where possible.
- Finally, complete the Required Training and Certification column with any certifications or degrees required by the job postings.
| Job Title | Duties | Required Skills | Required Experience | Required Training and Certification |
|---|---|---|---|---|
| Example | Perform vulnerability assessments and pen testing | Kali Linux, Metasploit, OWASP | 1-2 years in security | CEH, OSCP |
In this section, you'll explore pathways to gain the necessary certifications and skills for a penetration testing career.
- Based on your research in Part 2, answer the following:
- Which certifications are most commonly required?
- Example: CEH, OSCP, CISSP, etc.
- Which certifications are most commonly required?
- Investigate training options for the certifications you identified as critical. List the providers or institutions where you can take courses to prepare for those certifications.
- Example: Training for CEH is available via EC-Council, Offensive Security offers OSCP, etc.
Based on the jobs you researched, answer the following questions:
- Are jobs concentrated in one geographic area, or are they distributed?
- Answer:
- What are the most common duties mentioned?
- Answer:
End of Lab