All right, let us have a look at the different rules in cybersecurity, because before you move ahead
with the actual cybersecurity, you should have the knowledge of different rules in this field.
So the first thing is penetration test penetration.
Testers help the business and the organizations identify the security weaknesses in that information
systems network which affect their digital assets and the computer networks.
Some hold in-house positions with permanent employees functioning as a part of internal cybersecurity
or information technology.
Others walk specialized firms to provide penetration testing services, as I had mentioned in the previous
lectures.
Now, the industries that deal with high volumes of sensitive, personal, classified or proprietary
information tend to bring penetration, bestows on high demand on high numbers.
Some employers place on more emphasis on the candidate's knowledge and experience than their formal
education background.
That is why I always press on the line that knowledge is more important than finishing the course or
having a certification.
According to the Bureau of Labor Statistics, the average salary of information security analysts or
vendors BASTOS between 2018 and 2019 is around one hundred thousand dollars per year in the United States.
Again, this number is subject to change with many factors like expedients, the profile, knowledge,
degree and certification.
So what actually, penetration testing or penetration testers require that they require a solid understanding
of networking and most of the employers prefer those candidates who at least have some basic knowledge
of computer networks, because unless you have the knowledge of computer networks, you won't be able
to crack the network systems.
Then programming language or scripting or coding is very important, as it does with good working knowledge
of scripting and coding can save a great deal of time on individual assessments, thus, therefore,
a great value to their employees command of the operating system.
That's right.
You might have heard that most of the penetration testers use Linux as an operating system and therefore
penetration testing professionals need the advanced knowledge of the operating systems.
The attempt to hack or breach in conducting their assessments.
Mostly Windows operating system is used by many organizations.
But in order to get into the Windows operating system, Carleo operating system on the Linux operating
system is helpful.
Teamwork and desire to learn is also very important.
Now, hackers and cyber criminals constantly change their strategies and tactics and technology that
continually evolves.
So penetration testing professionals need to stay updated on the latest developments.
And that is why people who are keen to learn those candidates, which are always in the learning fees,
are preferred by the employers.
And lastly, the report writing and verbal communication.
Now team members must articulate their findings right to whatever you have found out in the assessment
or an interest test you should be able to note down so that the upper management should be able to understand
it.
For example, if you are a penetration tester working for my organization and I'm the upper management
being the upper management, I am these qualified, I am Cesme qualified, iso qualified.
Now, I don't know how you have executed The Exorcist clearly, but I do know what Nexuses is.
But I don't know what Python is.
I don't know how to code.
So you should be able to write the report in such a way that I can understand what exactly is the vulnerability?
What is the root cause of the vulnerability and what impact.
And this one really having my organization.
And that is why strong writing skills.
So penetration testing professionals?
Well, because their duties include producing a lot of reports so that the upper management can understand.
So this was full penetration testing.
Ben Testa's spend most of their time conducting the assessment and running tests now, these duties
may target internal or external assets and ESTOS can work both on site and remotely.
So if you have if you want to know about a day in the life of a protester, so generally during the
morning, the test vote, all the testing team decides on a strategy for the project at hand and sets
up the required tools.
In some cases, this involves rounding up of what profesional calls as open source intelligence or Sindy.
In the afternoon, themes carry out the tests.
They spent the morning designing the tests and then sometimes subdivide into smaller groups, with one
group playing the role of how hostile hackers and others playing the duties of internal people thus
test.
Those requirements involve many different responsibilities out of which we have discussed the important
skills.
Again, I'm telling you, the salary may change, so don't come running to me that you said I will get
a hundred thousand dollar salary.
It's not like that.
It depends upon different factors.
All right.
In the next lecture, we'll talk about information security analyst.