Hacker News Reader

Rather than working as a pen tester, I'd rather work on developing pen testing, auditing, intrusion detection software. A lot of security has been and is going to be automated.

And pen testing isn't a "sexy" job. Not amongst security and software developers anyway. I see on the same level as QA.

View on HN

Having worked alongside pentesters, I can assure you that there is plenty of pentesting that is far more complex than QA.

There are already many automated pentesting tools, and those are a good first pass, and yes, they could improve much further and take more of the bottom end of the pentesting market.

However, logic vulnerabilities, hardware vulns, research against browsers and operating systems, malware analysis, and even advanced network and web security testing, are all far from being automated.

Reply on news.ycombinator.com