How do they match: 15-1299.04 - Penetration Testers

Evaluate network system security by conducting simulated internal and external cyberattacks using adversary tools and techniques. Attempt to breach and exploit critical systems and gain access to sensitive information to assess system security.

Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.
Collect stakeholder data to evaluate risk and to develop mitigation strategies.
Conduct network and security system audits, using established criteria.
Configure information systems to incorporate principles of least functionality and least access.
Design security solutions to address known device vulnerabilities.
Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.
Develop and execute tests that simulate the techniques of known cyber threat actors.
Discuss security solutions with information technology teams or management.
Evaluate vulnerability assessments of local computing environments, networks, infrastructures, or enclave boundaries.
Gather cyber intelligence to identify vulnerabilities.
Identify security system weaknesses, using penetration tests.
Identify new threat tactics, techniques, or procedures used by cyber threat actors.
Investigate security incidents, using computer forensics, network forensics, root cause analysis, or malware analysis.
Prepare and submit reports describing the results of security fixes.
Test the security of systems by attempting to gain access to networks, Web-based applications, or computers.
Update corporate policies to improve cyber security.

How do they match: Penetration Testers