Security - Role
Penetration tester
Tests systems by attempting authorised attacks to find exploitable security weaknesses
What's it for?
Finds security weaknesses by carrying out authorised attacks and explaining how to fix the problems.
For example…
A penetration tester is authorised to attack a test version of a banking application and reports the vulnerabilities they successfully exploit
The penetration tester attempts to bypass authentication and escalate privileges while staying within an agreed scope and rules of engagement.