Penetration Testing Experience and How to Get It

Phillip Wylie, co-author of The Pentester Blueprint, opens with his own route into offensive security: professional wrestling, jewelry sales, a trade school for AutoCAD, and a move from systems administration into application security and then a first pentest role. He argues that career changers should not wait for a job title before building skills, since hands-on work from earlier roles transfers well.

The middle of the talk focuses on building practical experience. He recommends getting comfortable with vulnerability scanners such as Nessus alongside manual testing, using Kali Linux and Windows-based toolkits, and working through Metasploit, Burp Suite and ZAP. He suggests home labs, CTF platforms, bug bounty programs, low-cost or pro bono assessments for small organizations, and pentest-as-a-service contracts as ways to log real work. Publishing CVEs found in open-source software, writing walkthroughs, and sharing code on GitHub are presented as ways to show employers what you can do.

The closing section covers networking and job search tactics: attending BSides and local hacker and ISSA meetings, keeping an active LinkedIn profile, and asking contacts for referrals. He cautions against paying for mentorship and against generic certification roadmaps, favoring practitioner-recommended credentials and red-team courses as next steps.