So You Think You Want to Be a Penetration Tester
Anch provides a candid career roadmap for prospective penetration testers, covering necessary technical proficiencies, soft skills, and industry expectations.
Summary
Architecture and Background
So, you think you want to be a penetration tester, or you already are and don’t understand what the difference between you and all the other “so called” penetration testers out there. Think you know the difference between a Red Team, Penetration Test and a Vulnerability assessment? Know how to write a report your clients will actually read and understand?
Vulnerability Analysis
Can you leverage the strengths of your team mates to get through tough roadblocks, migrate, pivot, own and pillage? No? well this talk is probably for you then!
Exploitation and Demonstrations
We will go through the fascinating, intense and often crazily boring on-site assessment process. Talk about planning and performing Red Teams, how they are different, and why they can be super effective and have some fun along the way. I’ll tell you stories that will melt your face, brain and everything in between.
Remediation and Defensive Strategies
Give you the answers to all of your questions you never knew you had, and probably make you question your life choices. By the end of this session you will be ready to take your next steps into the job you’ve always wanted, or know deep inside that you should probably look for something else. There will be no judgment or shame, only information, laughter and fun. Arch currently works on a Red Team for an agency with a 3 letter acronym. It’s not secret squirrel, or hush hush he just doesn’t like to talk about himself very much. He has 15 years of experience in penetration testing and cyber security with a background in control systems and security architecture.
Related talks
CREST Videos·16 min
CREST Careers Evening
Careers in Penetration Testing - Tom Ellson (JUMPSEC) | CREST Careers Evening.
Main Stage·53 min
Anch
Anch details the Monkey in the Middle: A pentesters guide to playing in traffic.
Main Stage·47 min
Nir Valtman
Nir Valtman explores bug bounty programs evolution at DEF CON 22, examining penetration-testing and practical defenses.


