Penetration Testers
Your AI roadmap
3 of your strengths already reach other roles.
Your strengths
Where this comes from
AI-assisted vulnerability discovery
SANS Institute — AI Vulnerability Dis…
View guidance from your fieldAdversarial AI and LLM red-teaming
OWASP Gen AI Security Project — Annou…
View guidance from your fieldAI-augmented reconnaissance and OSINT
GIAC — Offensive AI Analyst (GOAA) Ce…
View guidance from your fieldHow AI evolves your skills
Today
AI-assisted vulnerability discovery
AI evolution
SANS pen testers report that starting from source code and having an AI agent work through it produced five critical findings on day one of a system they had already tested the year before, spanning authentication bypasses, BOLA, IDOR, cross-tenant access, and race conditions.
Verified · SANS Institute — AI Vulnerability Dis…Where this comes from
SANS Institute — AI Vulnerability Dis…
View guidance from your fieldToday
Adversarial AI and LLM red-teaming
AI evolution
OWASP's GenAI Red Teaming Guide gives red-team practitioners a structured, risk-based methodology covering everything from model-level vulnerabilities and prompt injection to system-integration pitfalls across model evaluation, implementation, infrastructure, and runtime behavior.
Verified · OWASP Gen AI Security Project — Annou…Where this comes from
OWASP Gen AI Security Project — Annou…
View guidance from your fieldToday
AI-augmented reconnaissance and OSINT
AI evolution
The GIAC Offensive AI Analyst certification objectives require candidates to demonstrate the reconnaissance phase of penetration testing, apply AI safely and ethically during OSINT activities, and perform AI-powered reconnaissance and OSINT automation.
Verified · GIAC — Offensive AI Analyst (GOAA) Ce…Where this comes from
GIAC — Offensive AI Analyst (GOAA) Ce…
View guidance from your field
Your next moves
- This week
AI-assisted vulnerability discovery
Where this comes from
SANS Institute — AI Vulnerability Dis…
View guidance from your field - This month
Adversarial AI and LLM red-teaming
Where this comes from
OWASP Gen AI Security Project — Annou…
View guidance from your field - This quarter
AI-augmented reconnaissance and OSINT
Where this comes from
GIAC — Offensive AI Analyst (GOAA) Ce…
View guidance from your field
Vetted courses for this role are still being checked — your free reading and next steps are on your plan.
Where it leads
- Information Security EngineersBuilds on the llm you already use.
- Software DeveloperNearby work, built on familiar ground.
- Blockchain EngineersNearby work, built on familiar ground.
From official U.S. labor data
U.S. Department of Labor · O*NET(r) is sponsored by the U.S. Department of Labor, Employment and Training Administration. Used under Creative Commons Attribution 4.0 International (CC BY 4.0).
U.S. Department of Labor
View the official data