Explore careers

Useful experience for penetration testers includes:

• working in IT-related jobs such as IT support technician
• on-the-job training through IT internships
• hacking experience gained through study or hacking conferences
• working on individual IT projects such as setting up your own penetration testing lab or assembling computers.

• NxtSteps website - IT internships and graduate programmes
• Summer of Tech website - IT internship programme

Penetration testers may do some or all of the following:

• keep up to date with cyber security threats and software used by hackers
• analyse how organisations use their IT systems and where security weaknesses may occur
• attempt to break into IT systems to discover their security weaknesses
• create tests to identify and exploit weaknesses and security issues in IT systems
• monitor IT systems to discover new vulnerabilities 
• produce reports to help organisations correct their IT security weaknesses.

Penetration testers in demand

Penetration testers are in high demand due to:

• organisations shifting services and systems online
• increasing numbers of devices that are connected to the internet, including vehicles, which hackers can access and damage online.

Shortage of experienced penetration testers

There are not enough experienced penetration testers to meet demand. Nearly two thirds of IT employers report skills shortages, and there aren't enough information technology (IT) trainees.

As a result, ICT security specialist (which includes penetration tester) appears on Immigration New Zealand's long-term skill shortage list. This means the Government is actively encouraging skilled penetration testers from overseas to work in New Zealand.

According to the Census, 468 penetration testers worked in New Zealand in 2018.

How to get your first IT job 

You can improve your chances of getting an IT job by gaining experience through government and IT industry initiatives, which include:

• internships such as Summer of Tech
• graduate programmes offered by IT companies
• events such as hackathons
• mentoring programmes.

• Summer of Tech website - IT internship programme
• Cyber Security Challenge website - events

Types of employers varied

Penetration testers may work for a wide range of organisations, including:

• private companies 
• government departments and other large organisations
• telecommunications and energy companies.

Penetration testers may also be self-employed.

IT Professionals

0800 252 255 - info@itp.nz - www.itp.nz

NZTech

(09) 475 0204 - info@nztech.org.nz - www.nztech.org.nz

Penetration testers may progress to set up their own business, or move into roles such as: 

• principal security tester
• security incident response specialist
• public speaker and security researcher
• security software developer
• security manager
• chief technology officer (CTO)
• chief information security officer (CISO).

• Information technology manager job information
• Information technology architect job information

Penetration testers may specialise in:

• cloud security – testing the security of data stored on servers hosted on the internet
• internet security – testing the security of access to computer systems and databases via the internet
• mobile security – testing the security of smartphones and other portable devices, and the networks they connect to
• network security – testing the security of the internal computer network of an organisation.

Penetration testers need to be:

• creative and imaginative as they need to design and create tests
• good at analytical thinking
• good at problem solving
• skilled at verbal and written communication as they have to create reports and communicate with technical and non-technical staff
• detail-oriented and curious as they have to work on complex technical questions.