CC14: Pathways to Pentesting

Building a penetration-testing career takes more than learning security tools. Heisenberg explains the mindset, ethics, practical skills, and experience that help new practitioners become effective pentesters. This CactusCon 14 talk covers routes into professional penetration testing for people from varied technical and educational backgrounds. It addresses certifications, operating-system and networking fundamentals, scripting, hands-on labs, teamwork, and ways to develop offensive-security experience within an existing role. Topics covered: Curiosity, persistence, and motivation for penetration testing Ethics, authorization boundaries, integrity, and teamwork The practical value and limits of cybersecurity certifications Windows, Linux, macOS, networking, Bash, Python, and PowerShell fundamentals Nmap, Metasploit, Burp Suite, password cracking, vulnerability scanning, and practice labs Building experience, finding stepping-stone roles, and handling technical interviews honestly 00:00 Introduction and career perspective 07:02 What makes a good pentester 08:14 Aptitude and motivation 10:10 Ethics and integrity 14:06 Teamwork and knowledge sharing 18:46 Education and certifications 25:29 Core technical skills 31:09 Tools, frameworks, and practice labs 37:00 Landing the first pentesting job 38:52 Preparing for job interviews 40:23 Q&A #CactusCon #PenetrationTesting #CybersecurityCareers #EthicalHacking