Grade Calculator — DevLevelUp

Select a role to assess

Rate your skill proficiency — the system will calculate your recommended grade

Role

Skills Self-Assessment

Role: Penetration Testing Engineer

Assessed: 0 Total: 0

API Protocols 1

▼

Understands WebSocket basics from a security perspective: WebSocket handshake vulnerabilities, cross-site WebSocket hijacking (CSWSH), and authentication token handling in WebSocket connections. Follows team methodologies for WebSocket security testing and vulnerability identification.

Conducts security testing of WebSocket implementations: tests for CSWSH vulnerabilities, injection attacks through WebSocket messages, and authorization bypass in message handling. Uses Burp Suite WebSocket extensions and custom scripts for automated WebSocket security scanning. Identifies insecure message validation and serialization patterns.

Defines API strategy at the product level. Establishes design standards. Conducts API design reviews. Coordinates cross-team API interaction.

Defines enterprise security strategy for real-time communication infrastructure. Shapes organizational capabilities for WebSocket and streaming protocol security assessment. Drives adoption of continuous security validation for real-time communication systems. Coordinates with industry on emerging WebSocket security threats and countermeasures.

Application Security 5

▼

Understands basic Dependency Vulnerability Scanning concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Uses dependency scanning results from Snyk, Grype, or OWASP Dependency-Check to identify attack vectors during penetration tests. Maps known CVEs in third-party libraries to practical exploit scenarios. Understands the difference between reachable and unreachable vulnerable code paths when prioritizing findings. Validates whether dependency vulnerabilities are exploitable in the application's specific deployment context.

Defines the penetration testing team's strategy for leveraging dependency scanning data in engagements. Establishes standard operating procedures for correlating SCA findings from Snyk, Grype, and OSV with exploitable attack paths. Coordinates red team exercises that simulate supply chain attacks targeting vulnerable dependencies. Trains pentest engineers on advanced SCA exploitation techniques, SBOM analysis, and supply chain threat intelligence.

Defines the organizational strategy for integrating dependency scanning intelligence into offensive security programs at enterprise scale. Shapes the architecture for correlating SCA, SBOM, and threat intelligence data to prioritize penetration testing engagements across business units. Coordinates compliance-driven supply chain security assessments aligned with NIST SSDF, SLSA, and EU CRA requirements. Represents the organization in security communities, contributing to industry standards for supply chain attack simulation and SCA-driven red teaming.

Understands basic OWASP and Application Security concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Applies OWASP Testing Guide methodology for web application penetration testing. Conducts security assessments identifying OWASP Top 10 vulnerabilities with manual exploitation techniques. Uses specialized tools (Burp Suite Professional, sqlmap, custom scripts) for deep vulnerability validation and proof-of-concept development.

Defines penetration testing strategy and application security assessment programs across the organization. Establishes security testing policies, red team exercise frameworks, and vulnerability disclosure processes. Coordinates large-scale security assessments and trains teams on advanced attack simulation methodologies.

Defines enterprise offensive security strategy spanning application, infrastructure, and supply chain attack surfaces. Shapes organizational red team capabilities and advanced persistent threat simulation programs. Coordinates industry compliance and represents the organization at security conferences and in vulnerability research communities.

Understands basic SAST/DAST concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Uses DAST tools alongside manual penetration testing to discover runtime vulnerabilities. Validates SAST findings through exploitation to confirm real attack vectors. Integrates dynamic scanning into penetration testing workflows to maximize coverage of web application attack surfaces.

Defines SAST/DAST integration strategy for penetration testing across all products. Establishes scanner validation policies and custom rule development standards. Coordinates offensive security efforts combining automated scanning with manual testing. Trains pentest engineers on advanced SAST/DAST usage.

Defines enterprise offensive security strategy integrating SAST/DAST with manual penetration testing at scale. Shapes security testing architecture for complex distributed systems. Coordinates with tool vendors and regulatory bodies on scanning standards. Represents the organization in offensive security community.

Understands basic secure coding concepts from a penetration testing perspective — recognizes injection, authentication bypass, and insecure deserialization patterns in source code. Follows security guidelines for identifying exploitable code weaknesses and understands how common vulnerabilities manifest in different programming languages.

Applies secure coding knowledge in penetration testing — reviews source code to identify exploitation vectors, maps code weaknesses to MITRE ATT&CK techniques, and develops proof-of-concept exploits from code analysis. Uses SAST tools alongside manual code review to prioritize penetration testing targets.

Defines secure coding assessment strategy for penetration testing programs across the organization. Establishes policies for code-assisted pentesting, source code review standards, and vulnerability remediation verification. Coordinates large-scale code security assessments and trains red team members on code-level exploitation methodologies.

Defines enterprise offensive security strategy integrating code-level vulnerability research with infrastructure and application security assessments. Shapes organizational red team capabilities combining source code analysis with advanced exploitation techniques. Coordinates industry compliance and represents the organization in vulnerability research and security conference communities.

Understands basic Threat Modeling concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Independently applies threat modeling to identify attack surfaces before penetration testing engagements. Maps MITRE ATT&CK techniques to system components. Understands trade-offs between different attack paths and prioritizes testing efforts. Creates threat-informed test plans covering network, application, and social engineering vectors.

Defines threat-driven penetration testing strategy at team level. Establishes threat model-informed scoping and prioritization for all engagements. Coordinates red team and purple team exercises aligned with organizational threat landscape. Builds feedback loops between threat modeling outcomes, pentest findings, and security architecture decisions.

Defines organizational threat modeling strategy that drives offensive security priorities. Shapes enterprise red team roadmap based on evolving threat landscape and adversary TTPs. Establishes frameworks linking threat intelligence, threat models, and penetration testing coverage across the organization. Influences industry offensive security practices through research and community engagement.

Authentication & Authorization 2

▼

Understands JWT/OAuth2 concepts from a security testing perspective: common JWT vulnerabilities (none algorithm, key confusion), OAuth2 redirect URI manipulation, and token leakage vectors. Recognizes insecure token storage and transmission patterns. Follows team guidelines for authentication security assessments.

Conducts security testing of JWT/OAuth2 implementations: exploits JWT algorithm vulnerabilities, tests OAuth2 flows for CSRF and code interception, and identifies token leakage through side channels. Uses specialized tools (jwt_tool, OWASP ZAP) for automated authentication testing. Creates proof-of-concept exploits for identified vulnerabilities.

Defines authentication security testing strategy for the organization. Establishes penetration testing methodologies for JWT/OAuth2/OIDC systems. Creates red team playbooks for identity infrastructure assessment. Coordinates authentication security testing across product teams. Trains pentest team on advanced authentication attack techniques.

Defines enterprise security testing strategy for identity and authentication infrastructure. Shapes organizational red team capabilities for authentication system assessment. Drives adoption of continuous authentication security validation across all products. Coordinates with identity vendors and standards bodies on emerging authentication threats.

Understands basic RBAC / ABAC Authorization concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Tests RBAC and ABAC implementations for privilege escalation and authorization bypass. Conducts penetration testing of access control mechanisms across application layers. Uses specialized tools to enumerate roles, permissions, and detect misconfigurations.

Defines authorization penetration testing strategy across all products and platforms. Establishes security testing policies for RBAC/ABAC implementations. Coordinates red team exercises targeting access control systems. Trains pentest engineers on advanced authorization bypass techniques.

Defines enterprise-wide authorization security assessment strategy across all access control systems. Shapes offensive security architecture targeting RBAC/ABAC at scale. Coordinates compliance-driven authorization testing with regulatory bodies. Represents the organization in offensive security community.

Concurrency & Parallelism 1

▼

Understands the fundamentals of Multithreading at a basic level. Applies simple concepts in work tasks using Python/Bash. Follows recommendations from senior developers when solving problems.

Independently applies multithreading for penetration testing: concurrent port scanning and service enumeration, parallel brute-force and fuzzing techniques, thread-safe results aggregation from multiple attack vectors. Explains concurrency trade-offs for assessment speed vs detection avoidance.

Defines multithreading standards for penetration testing teams: establishes guidelines for concurrent scanning and assessment tool architectures, conducts reviews of parallel exploit execution designs, creates training materials on thread-safe offensive security tool development.

Defines organizational multithreading strategy for offensive security: evaluates enterprise approaches to concurrent assessment tooling, makes technology decisions on parallel scanning and exploitation frameworks, mentors leads on high-performance concurrent offensive security architectures.

Container Security 1

▼

Understands basic container security scanning for penetration testing. Uses scanning tools to identify vulnerable packages in target container images. Follows team methodology for container escape techniques and runtime vulnerability assessment.

Independently assesses container security posture using scanning and runtime analysis tools. Identifies misconfigurations in Dockerfiles, privilege escalation vectors, and exposed secrets. Tests container isolation boundaries and orchestrator security settings.

Defines container security assessment strategy and red team methodology. Establishes container penetration testing standards, reporting frameworks, and remediation verification processes. Coordinates offensive security exercises targeting container infrastructure.

Shapes enterprise container offensive security strategy and threat intelligence program. Drives adoption of advanced container security testing methodologies across the organization. Defines container threat landscape analysis and risk assessment frameworks.

DNS & Networking 1

▼

Understands basic VPN and Network Isolation concepts. Uses ready-made configurations. Performs simple operations under senior guidance.

Independently assesses VPN and network isolation implementations: tests IPSec/WireGuard configurations for cryptographic weaknesses, evaluates segmentation bypass vectors, and validates firewall rule effectiveness. Uses network analysis tools (Wireshark, nmap, Burp) to identify misconfigurations in tunnel and isolation setups.

Defines infrastructure strategy with VPN and Network Isolation. Establishes IaC standards. Conducts architecture reviews. Optimizes FinOps.

Defines the organization's cloud strategy. Evaluates multi-cloud vs single-cloud. Designs enterprise-grade infrastructure. Establishes FinOps practices.

GraphQL 1

▼

Understands basics of GraphQL from a penetration testing perspective — introspection enumeration, query injection, and authorization bypass vectors. Performs basic reconnaissance of GraphQL endpoints. Follows team methodologies for initial GraphQL security assessment.

Independently conducts security assessments of GraphQL APIs — exploits batching attacks, field suggestion enumeration, and nested query DoS vectors. Develops custom GraphQL fuzzing tools and introspection analysis scripts. Documents findings with proof-of-concept exploits and remediation guidance.

Defines GraphQL security assessment strategy across the product portfolio. Establishes standards for GraphQL threat modeling, introspection policy enforcement, and query depth governance. Conducts cross-team API security reviews and coordinates GraphQL vulnerability disclosure processes.

Defines organizational GraphQL security strategy spanning all API surfaces. Designs enterprise-grade GraphQL security frameworks including automated vulnerability detection, query cost enforcement, and zero-trust authorization patterns. Establishes GraphQL security governance standards and certification processes for production deployments.

Incident Response 3

▼

Understands basic Digital Forensics concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Uses digital forensics fundamentals to document exploitation evidence during penetration tests. Captures system artifacts, file hashes, and timeline data to support findings. Analyzes disk images and memory snapshots to identify indicators of compromise and validate attack paths.

Defines forensic capabilities within the offensive security practice. Establishes standards for evidence collection, preservation, and reporting during penetration tests and red team exercises. Coordinates with legal and compliance teams on forensic requirements and trains offensive security staff on forensic techniques.

Defines enterprise-wide offensive security forensic standards that align with legal and regulatory frameworks. Shapes the industry approach to forensic-integrated penetration testing. Advises executive leadership on forensic capabilities required for advanced threat simulation and incident preparedness.

Understands basic Incident Response Process concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Supports incident response by providing offensive security expertise during active incidents. Validates attack vectors and helps determine scope of compromise. Documents exploitation paths for post-incident analysis and contributes to lessons-learned reviews with remediation recommendations.

Defines offensive security's role in the incident response process across the organization. Establishes red team/purple team exercise programs that systematically test incident response maturity. Coordinates with SOC leadership on improving detection coverage based on real-world attack simulation results.

Shapes enterprise security posture by aligning offensive testing programs with incident response maturity models. Drives industry-level contributions to attack simulation frameworks and adversary emulation standards. Advises executive leadership on threat landscape trends and organizational readiness for advanced persistent threats.

Understands basic Vulnerability Management concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Discovers and validates vulnerabilities through penetration testing and exploitation. Assesses vulnerability severity using CVSS scoring and real-world exploitability analysis. Uses vulnerability management platforms to track findings and verify remediation effectiveness across tested systems.

Defines vulnerability discovery strategy integrating penetration testing with continuous scanning programs. Establishes severity classification policies and validation standards for reported vulnerabilities. Coordinates red team assessments feeding into vulnerability management processes. Trains pentest engineers on systematic vulnerability analysis.

Defines enterprise offensive security strategy feeding vulnerability management across all systems and platforms. Shapes vulnerability assessment architecture combining internal red team and external testing at scale. Coordinates responsible disclosure programs with vendors and CERTs. Represents the organization in vulnerability research community.

Infrastructure Security 3

▼

Understands basic Cloud Infrastructure Security concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Performs cloud penetration testing across AWS, Azure, and GCP environments. Conducts security reviews targeting IAM misconfigurations and exposed services. Uses cloud-specific exploitation tools and techniques to identify privilege escalation paths and data exfiltration vectors.

Defines offensive cloud security strategy across AWS, Azure, and GCP attack surfaces. Establishes penetration testing policies and red team engagement rules for cloud infrastructure. Coordinates response to critical cloud vulnerabilities discovered during assessments and trains teams on cloud exploitation frameworks.

Defines enterprise offensive security strategy for cloud environments across all major providers. Shapes red team architecture and advanced cloud exploitation research programs. Coordinates compliance of penetration testing practices with regulatory frameworks and represents the organization in offensive security communities and conferences.

Understands basic Kubernetes Security concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Performs security assessments of Kubernetes clusters identifying misconfigurations in RBAC, network policies, and pod security. Uses tools like kube-hunter and kubeaudit to discover vulnerabilities. Tests container escape scenarios and lateral movement paths within cluster environments.

Defines Kubernetes offensive security testing programs covering multi-cluster and multi-cloud environments. Establishes red team playbooks for container orchestration attacks aligned with current threat intelligence. Coordinates with platform teams on remediation priorities and drives continuous improvement of cluster security posture.

Defines enterprise Kubernetes offensive security strategy addressing evolving container and orchestration attack surfaces. Shapes industry standards for cloud-native penetration testing and adversary simulation. Advises executive leadership on container security risks and drives research into novel attack vectors targeting Kubernetes ecosystems.

Understands basic network security concepts: TCP/IP model, common ports and protocols, firewall rule logic. Can run Nmap scans, read packet captures in Wireshark, and identify open services on a target host under supervision.

Independently performs network penetration testing: conducts host discovery, service enumeration, and vulnerability scanning across subnets. Exploits misconfigured firewalls, weak VPN setups, and unpatched network services. Writes clear findings on network segmentation gaps and proposes remediation for IDS/IPS evasion techniques discovered during engagements.

Leads the team's network penetration testing practice: defines engagement scoping for network assessments, standardizes network attack toolchains and reporting templates, and prioritizes remediation across firewall, VPN, and segmentation findings. Builds team capabilities in advanced network exploitation and coordinates purple-team exercises focused on network defense validation.

Defines the organization's network penetration testing strategy and standards: establishes red-team network attack frameworks, sets maturity benchmarks for network defense across all departments, and drives executive-level reporting on network risk posture. Builds cross-functional partnerships with network engineering and cloud teams to embed offensive security validation into infrastructure change management processes.

Logging 1

▼

Understands the fundamentals of ELK Stack for penetration testing workflows. Uses Kibana to review scan results and vulnerability logs. Writes basic Elasticsearch queries to correlate findings across target systems. Follows established index patterns and dashboard templates.

Configures ELK Stack for centralized penetration testing reporting. Builds Logstash pipelines to ingest Nmap, Burp Suite, and Metasploit output. Creates Kibana dashboards to track vulnerability severity distribution and remediation status. Writes Elasticsearch aggregation queries to correlate findings across engagements.

Defines the offensive security team's observability strategy using ELK Stack. Establishes SLO-based approach for vulnerability management metrics: detection-to-report time, retest coverage, and finding recurrence rates. Coordinates incident management workflows between red team and blue team through shared Kibana dashboards and Elasticsearch alerting. Drives adoption of OpenSearch for cost-effective long-term storage of engagement data. Optimizes MTTD/MTTR by integrating ELK with ticketing and notification systems.

Defines the organization's security observability strategy integrating ELK Stack across offensive and defensive operations. Implements platform-level solutions: centralized Elasticsearch clusters for multi-team security data with cross-cluster replication. Builds reliability culture around security tooling with SLO frameworks for detection pipelines, log completeness, and alert delivery. Establishes enterprise governance for security log retention, chain-of-custody requirements in Elasticsearch indices, and compliance reporting through Kibana Canvas.

Additional skills (optional) 31

These skills do not affect the main grade but show the breadth of your profile.

AI Coding Assistants

▼

Understands basic GitHub Copilot usage for penetration testing: leveraging suggestions for exploit script development, using Copilot Chat for security tool API questions, critically evaluating completions for attack payloads and assessment scripts. Follows team guidelines on responsible use of AI for security tooling.

Independently configures GitHub Copilot for penetration testing workflows: crafts prompts for exploit development and assessment automation scripts, evaluates completions for security tool accuracy, uses Copilot Chat for vulnerability analysis assistance. Understands trade-offs between AI-assisted scripting speed and exploit code reliability.

Defines GitHub Copilot strategy for penetration testing teams: establishes ethical guidelines for AI-assisted exploit development, designs review policies for AI-generated security assessment code, drives responsible Copilot adoption with focus on confidentiality and compliance.

Algorithms & Data Structures

▼

Understands the fundamentals of Algorithms & Complexity at a basic level. Applies simple concepts in work tasks using Python/Bash. Follows recommendations from senior developers when solving problems.

Independently applies algorithmic thinking in security testing: evaluates scanning algorithm efficiency, understands graph-based attack path analysis, selects fuzzing strategies for input space coverage. Analyzes complexity trade-offs between scanning depth and execution time.

Defines algorithmic standards for security testing team: scanning algorithm selection criteria, fuzzing strategy evaluation, attack path analysis algorithm reviews. Conducts reviews of algorithmic trade-offs between testing thoroughness and operational efficiency.

Understands the fundamentals of Data Structures at a basic level. Applies simple concepts in work tasks using Python/Bash. Follows recommendations from senior developers when solving problems.

Independently selects appropriate data structures for penetration testing: target enumeration lists, credential storage structures, vulnerability finding databases. Understands trade-offs between data organization for scan efficiency and result correlation.

Defines data structure standards for security testing team: target enumeration data models, exploit payload organization, evidence collection structures. Conducts reviews of scanning tool data architecture. Establishes team guidelines for efficient vulnerability data management.

API Management

▼

Uses Burp Suite and Postman to intercept and replay API requests. Tests for basic API vulnerabilities: broken authentication, excessive data exposure, injection in parameters. Can modify request headers and payloads to probe for security weaknesses in REST endpoints.

Performs targeted API penetration testing with Burp Suite extensions, custom fuzzing scripts, and OWASP ZAP. Exploits BOLA, broken function-level authorization, and SSRF via API parameters. Chains API vulnerabilities to demonstrate real-world attack impact. Writes Burp macros for multi-step authentication bypass scenarios.

Defines API penetration testing methodology and toolchain standards for the security team. Evaluates and integrates commercial and open-source API security tools (Burp Suite Enterprise, Nuclei, custom scanners). Coordinates API security assessments across product lines, prioritizes findings by business risk, and drives remediation with engineering leads. Builds team competency in emerging API attack vectors.

Shapes the organization's API security testing vision and long-term strategy. Pioneers adoption of AI-augmented API fuzzing, runtime API threat detection, and zero-trust API architectures. Publishes research on novel API attack techniques and contributes to industry standards (OWASP API Security). Advises executive leadership on API risk posture across the product portfolio and drives strategic security investments.

Understands rate limiting fundamentals for penetration testing: identifies missing or weak rate limiting on authentication endpoints, API keys, and form submissions. Follows team methodologies for testing brute-force protections and reporting throttling gaps.

Independently tests rate limiting implementations: crafts bypass techniques using header manipulation, IP rotation, and request fragmentation. Validates throttling consistency across API endpoints and documents rate limiting weaknesses with reproducible PoCs.

Defines API strategy at the product level. Establishes design standards. Conducts API design reviews. Coordinates cross-team API interaction.

Defines the organization's API strategy. Designs platform API. Establishes enterprise API governance and standards.

Caching

▼

Understands basics of Redis from a penetration testing perspective — default configuration vulnerabilities, unauthorized access vectors, and data exposure risks. Performs basic security scans of Redis instances. Follows team methodologies for Redis security assessment during infrastructure pentests.

Conducts Redis security audits — unauthenticated exploitation, RCE via Lua scripting, SSRF via Redis protocol. Checks encryption at rest and in transit.

Defines Redis and in-memory store audit methodology for the team, creates automated checks. Coordinates with DevOps on remediation and security monitoring.

CI/CD

▼

Clean Code & Refactoring

▼

Understands the fundamentals of Code Quality & Refactoring at a basic level. Applies simple concepts in work tasks using Python/Bash. Follows recommendations from senior developers when solving problems.

Independently applies code quality practices in penetration testing tooling. Writes clean exploit and scanner scripts with proper documentation and evidence logging. Understands trade-offs between tool speed and detection accuracy. Reviews security scripts for operational safety, target scoping, and result repeatability.

Defines code quality standards for penetration testing team: exploit code conventions, scanner module architecture, report automation guidelines. Conducts reviews of testing methodology and evidence collection. Establishes quality gates for tool accuracy and operational security.

Cloud Providers

▼

Code Review

▼

Understands basic code review from security perspective: reviewing security tool code changes, checking exploit module modifications, validating scanning rule implementations. Follows team review guidelines for security tooling code.

Independently conducts security-focused code reviews: evaluates vulnerability findings in code, reviews exploit module implementations, checks security tool scanning rules. Provides constructive feedback from offensive security perspective on application code.

Defines security code review strategy for security testing team: offensive security review standards, exploit code quality governance, security tool review practices. Establishes review culture for security testing code quality.

Concurrency & Parallelism

▼

Understands the fundamentals of Async Programming at a basic level. Applies simple concepts in work tasks using Python/Bash. Follows recommendations from senior developers when solving problems.

Independently applies async programming in security tools: concurrent port scanning, async exploit delivery, non-blocking vulnerability assessment operations. Understands trade-offs between parallel and sequential scanning strategies for efficiency.

Defines async programming standards for security testing team: concurrent scanning architecture guidelines, async exploit execution reviews, non-blocking assessment patterns. Establishes best practices for async patterns in security testing tools.

Containerization

▼

Understands basic Docker concepts for penetration testing: containerized security tools (Kali, Metasploit), Docker images for isolated attack environments, basic docker-compose for target lab setups. Uses ready-made configurations for pentest tool containers.

Independently configures Docker for penetration testing: containerized attack tool environments, docker-compose for target lab infrastructure, Dockerfile for custom exploit development images. Understands container network isolation for safe testing and ephemeral container patterns for clean attack environments.

Defines Docker strategy for security testing: ephemeral test environment standards, container security assessment governance, isolated lab architecture guidelines. Conducts architecture reviews for containerized pentest infrastructure and establishes secure container usage policies.

Distributed Tracing

▼

Git & Workflows

▼

Understands basic Git advanced features for penetration testing: branching for engagement-specific tool configurations, stash for switching between target environments, .gitignore for excluding sensitive findings and credentials. Follows team conventions for versioning exploit scripts and assessment tooling.

Independently uses Git advanced features for penetration testing: manages engagement-specific branches with proper isolation of findings, resolves conflicts in shared tool configurations, implements hooks for credential leak prevention. Understands trade-offs between private forks and branch-based isolation for sensitive assessment data.

Defines Git strategy for penetration testing teams: establishes standards for secure repository management of assessment data, designs access control and audit policies for engagement repositories, drives adoption of automated secret scanning across all team repositories.

Integration Testing

▼

Kubernetes & Orchestration

▼

Logging

▼

Understands basic structured logging for penetration testing: reading target application logs during assessments, understanding logging gaps as attack vectors, basic log analysis for detecting exploitation evidence. Follows team conventions for documenting logging-related findings.

Configures structured logging analysis for penetration testing: implements log monitoring during active assessments, creates dashboards for tracking exploitation detection by defenders, sets up log analysis for identifying blind spots in target monitoring. Analyzes logging coverage gaps as part of assessment findings.

Defines observability assessment strategy for penetration testing practice: establishes SLO-based approach for security monitoring evaluation, coordinates incident response validation during assessment engagements, optimizes MTTD/MTTR measurement methodology for client organizations.

Metrics & Monitoring

▼

Networking

▼

Understands basic networking concepts from a penetration testing perspective — TCP/IP stack analysis, port scanning with nmap, and network reconnaissance techniques. Uses ready-made configurations for network scanning tools and performs simple network assessments under senior guidance.

Independently conducts network penetration assessments — exploits network protocol vulnerabilities, performs man-in-the-middle attacks for security validation, and conducts wireless network security testing. Writes IaC for pentest lab network infrastructure and understands advanced network attack vectors and defenses.

Defines network security assessment strategy across the organization's infrastructure. Establishes IaC standards for penetration testing lab environments and attack simulation platforms. Conducts architecture reviews of network security configurations and drives adoption of zero-trust network principles across engineering teams.

Defines organizational network security strategy spanning enterprise, cloud, and edge network environments. Evaluates multi-layered network defense architectures and designs enterprise-grade red team network assessment programs. Establishes FinOps practices for security infrastructure balancing protection investment with threat landscape analysis.

OOP & Design Patterns

▼

Understands the fundamentals of OOP & SOLID Principles at a basic level. Applies simple concepts in work tasks using Python/Bash. Follows recommendations from senior developers when solving problems.

Independently applies OOP/SOLID in penetration testing tools: proper abstraction for exploit modules, interface-based scanner plugins, single responsibility in payload generation and delivery components. Understands trade-offs between OOP patterns for extensible security frameworks and rapid exploit development.

Defines OOP/SOLID standards for security testing team: exploit module architecture guidelines, scanner plugin interface contracts, payload framework class design. Conducts reviews of OOP decisions balancing tool extensibility with exploit development speed.

Prompt Engineering

▼

Relational Databases

▼

REST API

▼

Understands basic REST API concepts for security testing: API endpoint enumeration, authentication bypass patterns, common API vulnerabilities (BOLA, broken auth). Follows team conventions for API penetration testing methodology.

Independently tests REST API security: automated API fuzzing, authentication and authorization bypass testing, business logic vulnerability analysis. Understands best practices for API attack surface mapping, parameter tampering, and injection testing in RESTful services.

Defines API security testing strategy at product level: API penetration testing standards, automated API security scanning governance, API vulnerability assessment frameworks. Conducts API security architecture reviews and establishes API security testing processes.

Specialized Testing

▼

Understands penetration testing fundamentals: reconnaissance techniques, common web application vulnerabilities, and basic exploitation tools (Burp Suite, Metasploit). Conducts guided vulnerability assessments following established methodologies. Reports findings with clear reproduction steps and risk ratings.

Independently conducts penetration tests: web application exploitation (SQLi, XSS, SSRF, deserialization), API security testing, and infrastructure vulnerability assessment. Uses advanced Burp Suite techniques (custom extensions, intruder patterns). Creates proof-of-concept exploits and detailed technical reports with remediation guidance.

Defines penetration testing strategy for the organization. Establishes pentest methodologies, scope guidelines, and reporting standards. Coordinates red team operations and purple team exercises. Creates attack simulation frameworks for continuous security validation. Trains pentest team on emerging attack vectors.

Defines enterprise offensive security strategy. Shapes organizational red team capabilities and continuous security validation programs. Drives adoption of adversary simulation and breach-and-attack simulation (BAS) platforms. Coordinates with industry on emerging threats and offensive security research. Represents the organization in security conferences and standards bodies.

System Design

▼

Technical Documentation

▼

Understands the structure of penetration testing runbooks and engagement playbooks. Follows established runbooks for reconnaissance, scanning, and basic exploitation phases. Documents findings according to standard reporting templates.

Independently writes penetration testing runbooks for various engagement types: web application, network infrastructure, API testing. Creates playbooks with decision trees for exploitation paths and documents remediation guidance for common vulnerability patterns.

Defines runbook strategy for the penetration testing practice: standardizes engagement methodology playbooks, establishes quality gates for runbook completeness, drives integration of runbooks with vulnerability management platforms and reporting automation.

Defines organizational strategy for offensive security runbooks: establishes enterprise-wide red team and purple team engagement frameworks, drives industry-aligned methodology standards (PTES, OWASP, MITRE ATT&CK), creates runbook governance for regulatory compliance across penetration testing programs.

Unit Testing

▼