Ethical hacker
Also known as: vulnerability analyst, ethical hackers, ICT security tester, system security tester, network security tester
About this occupation
Ethical hackers perform security vulnerability assessments and penetration tests in accordance with industry-accepted methods and protocols. They analyse systems for potential vulnerabilities that may result from improper system configuration, hardware or software flaws, or operational weaknesses.
Essential skills and knowledge
- tools for ICT test automation
- web application security threats
- software anomalies
- identify ICT security risks
- identify ICT system weaknesses
- computer forensics
- provide technical documentation
- develop code exploits
- execute software tests
- cyber attack counter-measures
- perform security vulnerability assessments
- legal requirements of ICT products
Typical tasks and preparation
From the related US occupation profile Security Management Specialists (O*NET 13-1199.07). Linked by an official crosswalk: related, not identical; details vary by country.
- Assess the nature and level of physical security threats so that the scope of the problem can be determined.
- Respond to emergency situations on an on-call basis.
- Recommend improvements in security systems or procedures.
- Perform risk analyses so that appropriate countermeasures can be developed.
- Inspect physical security design features, installations, or programs to ensure compliance with applicable standards or regulations.
- Conduct security audits to identify potential vulnerabilities related to physical security or staff safety.
- Typical education (US)
- Bachelor's Degree
- Preparation
- Job Zone 4 of 5
- Interests
- Conventional, Investigative, Realistic
Top skills: Active Listening, Speaking, Critical Thinking, Reading Comprehension, Judgment and Decision Making, Coordination
US median pay: US$83,050 a year (2025), 1,087,090 employed. Source: U.S. Bureau of Labor Statistics, Occupational Employment and Wage Statistics.
Subjects this work relies on
How important each subject's knowledge is in the job itself, rated by people doing it (1 to 5).
- English or Literature in EnglishO*NET: English LanguageVery important (4.2)
- Computer StudiesO*NET: Computers and ElectronicsVery important (3.9)
- Business Studies or EntrepreneurshipO*NET: Administration and ManagementVery important (3.9)
- Government and PoliticsO*NET: Law and GovernmentVery important (3.8)
- PsychologyO*NET: PsychologyImportant (3.0)
- Design and TechnologyO*NET: Design + Engineering and TechnologyImportant (3.0)
- Technical DrawingO*NET: DesignImportant (3.0)
O*NET data describe work in the United States; requirements differ by country. This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET is a trademark of USDOL/ETA. CareerProof Global has modified all or some of this information; USDOL/ETA has not approved, endorsed, or tested these modifications.
Preparation needed
Job Zone Four: Considerable Preparation Needed
- Most common education (US)
- Bachelor's Degree
- Education
- Most of these occupations require a four-year bachelor's degree, but some do not.
- Experience
- A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.
- Training
- Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training.
O*NET data describe work in the United States; requirements differ by country. This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET is a trademark of USDOL/ETA. CareerProof Global has modified all or some of this information; USDOL/ETA has not approved, endorsed, or tested these modifications.
Related occupations
Occupations O*NET links to this one by similar work, skills and knowledge.
- Security Managers
- Digital Forensics Analysts
- Compliance Managers
- Management Analysts
- Retail Loss Prevention Specialists
- Health and Safety Engineers, Except Mining Safety Engineers and Inspectors
- Emergency Management Directors
- Security and Fire Alarm Systems Installers
- Gambling Surveillance Officers and Gambling Investigators
- Fire-Prevention and Protection Engineers
O*NET data describe work in the United States; requirements differ by country. This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET is a trademark of USDOL/ETA. CareerProof Global has modified all or some of this information; USDOL/ETA has not approved, endorsed, or tested these modifications.