Having said that, there may still be quite a few people who don't understand it, and the vocabulary is too professional, so let's talk about grounding gas;
According to web penetration, intranet penetration, automatic penetration, code audit, log analysis, emergency response, security reinforcement and other knowledge points. Most of the above positions are no problem, provided that the actual combat technology is excellent and the tools are used smoothly.
1. Professional counterpart: penetration test engineer
The professional counterpart is a penetration test engineer, who mainly undertakes the role of finding loopholes in enterprises, and the target of finding loopholes is mainly the loopholes in enterprise authorized stations or their own home systems; There are also some websites from GA that have made fixed-point breakthroughs.
2. Capacity improvement stage: security service post
If the ability is in the upgrading stage, it is more appropriate to engage in security service posts. This position needs to understand some principles of Web vulnerabilities, and can use some penetration tools to scan Web vulnerabilities or intranets, generate penetration test reports according to the scanning results, and put forward rectification suggestions. The difficulty is relatively low, and tools are often used to complete penetration, mainly because the task is heavy, and there are many websites that need penetration testing in one day, which need to be completed in a short time;
3. Strong ability: enter the enterprise/laboratory to follow up the product line.
Some people with stronger ability will choose to enter enterprises or laboratories and take the product line. Many times, they need to do security analysis, such as situational awareness products, understand the principle of Web penetration, use and write POC or EXP, and then use wireshark package analysis to extract some rules of vulnerability attack and exploitation, and extract corresponding rules.
4. Strong ability and good eloquence: infiltrating the lecturer position.
Of course, if your ability and eloquence are good, you can also choose to infiltrate the lecturer position, but this position has certain requirements for work experience.