Penetration Tester

Penetration testers are paid to try to break into computer systems, websites and networks with the owner's permission. They find security weaknesses, explain the risks and recommend how to fix them.

These are approximate UK figures for guidance only, not guaranteed salaries. Pay varies by employer, location and experience. Approximate. Based on National Careers Service ranges and UK job adverts; check current figures before deciding.

1. GCSEs including maths
2. A levels or Level 3 IT apprenticeship
3. Cyber security degree, apprenticeship or certifications
4. IT support or security analyst role
5. Penetration Tester

Many testers start in IT support or a security operations centre, practising on legal training platforms and gaining certifications. Cyber security degrees and apprenticeships are also common routes.

Routes vary. Always check entry requirements with course providers, employers and the relevant professional body.

Often useful but not essential

Main routes in: A levels, Apprenticeship, Degree, Other routes.

• Computing
• Maths

• Networking
• Linux
• Web security
• Scripting
• Clear report writing

• Security consultancies
• Banks
• Government and defence
• Tech companies

Computer-based project work, often for a consultancy with several clients. Mixes hands-on testing with report writing. Some tests happen out of hours.

Progress to senior tester, red team specialist, security consultant or head of offensive security.

• How to Get Into Cybersecurity With No Experience (A Real Beginner's Guide)