Mostly Resilient

Last Update: 8/30/2026

AI Resilience Score for Penetration Testers:

51.4%

Median Score

Meaningful human contribution

Low

Long-term employer demand

High

Sustained economic opportunity

High

Our confidence in this score:
Medium-high

Contributing sources

Methodology and Scoring Rationale

To score how resilient penetration testing is to AI, we ask one question in three parts:

First, how much of the job still needs a human, read from five AI-exposure sources: our own AI Resilience Model, Anthropic's Observed Exposure, Microsoft's AI Applicability, Will Robots Take My Job, and OpenAI Signals. We call this dimension Meaningful Human Contribution (MHC) and weight it at 40%.

Next, whether employers will keep hiring for this job over the long term. This dimension, which we call Long-term Employer Demand (LTE), is calculated from BLS data and weighted at 30%.

Last, whether pay and mobility will hold up. We use wage bill and adaptive capacity data from independent researchers (Althoff & Reichardt, 2026; Manning & Aguirre, 2026). We call this dimension Sustained Economic Opportunity (SEO) and weight it at 30%.

For penetration testers, only four of the eight sources had data. The sources that did weigh in agreed closely: both AI Resilience Model and Anthropic rated AI exposure as low for resilience, meaning AI can handle more of this work than you might expect. Still, BLS Opportunity Score and Wage Bill both came in high, pushing the overall score to "Mostly Resilient" despite softer human-contribution signals.

AI Resilience Report forPenetration Testers

$116,580 median salary27,000 annual openingsSOC Code: 15-1299.04

Penetration Testers are somewhat more resilient to AI impacts than most occupations, according to our analysis of 4 sources.

Penetration testing earns a "Mostly Resilient" label because AI is changing how the work gets done rather than eliminating the need for human testers altogether. The most repetitive parts of the job, like scanning systems, writing reports, and running routine scripts, are being heavily assisted by AI (with automation rates of 65 to 72 percent for some tasks), but the judgment calls, like figuring out whether a vulnerability is truly dangerous or mapping out a full attack chain, still need a sharp human mind.

Learn more about how you can thrive in this position

View analysis
Chat with Coach
Latest news
More career info
Analysis
Chat
News
More

This role is mostly resilient

Penetration testing earns a "Mostly Resilient" label because AI is changing how the work gets done rather than eliminating the need for human testers altogether. The most repetitive parts of the job, like scanning systems, writing reports, and running routine scripts, are being heavily assisted by AI (with automation rates of 65 to 72 percent for some tasks), but the judgment calls, like figuring out whether a vulnerability is truly dangerous or mapping out a full attack chain, still need a sharp human mind.

Read full analysis

Learn more about how you can thrive in this position

View analysis
Chat with Coach
Latest news
More career info
Analysis
Chat
News
More

Analysis of Current AI Resilience

Penetration Testers

Updated Quarterly

Analysis
Suggested Actions
State of Automation

How is AI changing Penetration Testers jobs?

Right now, AI is changing penetration testing fast, but it's mostly helping pen testers rather than replacing them. Companies tried handing the whole job to AI in 2025, and it didn't work out. The number of organizations willing to rely on AI-powered penetration testing for their security needs fell to 9% in 2026, down from 29% a year earlier, according to a Dark Reading report on 2026 industry data [1].

Why? Three-quarters of companies (78%) have had automated systems miss significant vulnerabilities — also known as "false negatives," dampening security professionals' enthusiasm for full automation.

Instead, the winning model is "agent-augmented human testing." AI does the boring, repetitive stuff — scanning, first-pass recon, drafting reports — while people handle the tricky judgment calls. On the offensive-security side, a Dice careers piece from July 2026 explains that [2] a lot of the work that used to be a natural entry point for junior analysts, scanning logs, triaging alerts, running routine pen test scripts, can now be augmented or automated. That matches the automation percentages for your role: report writing and documentation (65–72%) is being heavily assisted by AI, while tasks like discussing solutions with teams and assessing physical security stay very human.

The SANS 2026 Cybersecurity Workforce Research Report [3] puts it plainly: AI is disrupting entry-level roles, and skills now matter more than headcount.

Reveal More
AI Adoption

How fast is AI adoption growing for Penetration Testers?

Adoption is happening fast, but with a "human-in-the-loop" catch. Companies want AI because attacks are growing — Help Net Security reported in August 2026 that [4] 28.5% of cybersecurity job postings between October 2025 and March 2026 required AI skills, up from 14.2% in the same period a year earlier, and workers with AI skills earn 14.9% above the median for cybersecurity postings overall.

But there are real brakes on full automation. The costs of AI-powered penetration testing services are difficult to predict, and a human expert is needed to decide whether a lead is worth pursuing, and if it is, to work out what the full, validated attack chain looks like. Legal and trust factors matter too — companies need someone accountable for the report, not just a chatbot.

The good news for young people: demand is climbing. Coursera's 2026 career guide [5] notes that the US Bureau of Labor Statistics (BLS) projects a robust job outlook for penetration testers, with 29 percent growth for information security analysts, including penetration testers, between 2024 and 2034. The tricky part is that entry-level bars are rising — organizations look at that and determine they don't need three junior people but rather one senior person who can direct the AI and make the judgment calls it can't.

If you build hands-on lab experience, learn to supervise AI tools, and sharpen your judgment (not just your scripting), this career still has a bright, human-shaped future.

Reveal More
Will AI replace Penetration Testers?

Will AI replace Penetration Testers?

No. We don't think AI will replace Penetration Testers, though we do expect the job to change.

We give this career a 51.4% AI Resilience Score, and the data backs that up. AI is already handling the repetitive parts of pen testing: scanning, recon, and drafting reports. But when companies tried handing the whole job to AI, it backfired. The share of organizations willing to rely on fully automated penetration testing dropped to 9% in 2026, down from 29% a year earlier, largely because 78% of companies had automated tools miss serious vulnerabilities [1]. Humans are still needed to chase the tricky leads, validate attack chains, and sign off on findings.

The job market is also genuinely strong. The BLS projects 29% growth for information security analysts, including penetration testers, between 2024 and 2034 [5]. Demand for AI skills within cybersecurity is rising fast too, with 28.5% of job postings requiring them by early 2026 [4]. The catch is that entry-level roles are getting squeezed, since employers increasingly want one senior person directing AI tools rather than several juniors running scripts [3].

If you build real hands-on experience and learn to supervise AI rather than just use it, this career has a solid, human-shaped future ahead of it.

Reveal More
Career Village Logo

Help us improve this report.

Tell us if this analysis feels accurate or we missed something.

Share your feedback

Your Career Starts Here

Navigate your career with COACH, your free AI Career Coach. Research-backed, designed with career experts.

Explore careers

Plan your next steps

Get resume help

Find jobs

Explore careers

Plan your next steps

Get resume help

Find jobs

Explore careers

Plan your next steps

Get resume help

Find jobs

Career Village Logo

Ask a pro on CareerVillage.org. Free career advice from more than 200,000 professionals.

Latest AI news for Penetration Testers

These articles highlight the growing importance of AI in penetration testing, providing valuable insights for aspiring professionals. For instance, "What Is AI Pentesting?" explains how AI-driven techniques can quickly identify vulnerabilities, enhancing efficiency in cybersecurity. "How AI Is Changing Penetration Testing" emphasizes the shift from static automation to adaptive attacks, preparing testers for a rapidly evolving threat landscape. By understanding these developments, students can position themselves as resilient candidates in an industry increasingly reliant on AI technologies.

More Career Info

Career: Penetration Testers

They test computer systems by trying to hack them, helping companies find and fix security flaws to keep information safe.

Employment & Wage Data

Median Wage

$116,580

Jobs (2025)

471,200

Growth (2025-35)

+5.1%

Annual Openings

27,000

Education

Bachelor's degree

Experience

None

Source: Bureau of Labor Statistics, Employment Projections 2025-2035

Task-Level AI Resilience Scores

AI-generated estimates of task resilience over the next 3 years

1

88% ResilienceCore Task

Assess the physical security of servers, systems, or network devices to identify vulnerability to temperature, vandalism, or natural disasters.

2

82% ResilienceCore Task

Discuss security solutions with information technology teams or management.

3

75% ResilienceCore Task

Update corporate policies to improve cyber security.

4

72% ResilienceCore Task

Collect stakeholder data to evaluate risk and to develop mitigation strategies.

5

67% ResilienceCore Task

Develop security penetration testing processes, such as wireless, data networks, and telecommunication security tests.

6

65% ResilienceCore Task

Design security solutions to address known device vulnerabilities.

7

62% ResilienceCore Task

Configure information systems to incorporate principles of least functionality and least access.

Tasks are ranked by their AI resilience, with the most resilient tasks shown first. Core tasks are essential functions of this occupation, while supplemental tasks provide additional context.

The AI Resilience Report is a project from CareerVillage.org®, a registered 501(c)(3) nonprofit.

Built with ❤️ by Sandbox Web

The AI Resilience Report is governed by CareerVillage.org’s Privacy Policy and Terms of Service. This site is not affiliated with Anthropic, Microsoft, or any other data provider and doesn't necessarily represent their viewpoints. This site is being actively updated, and may sometimes contain errors or require improvement in wording or data. To report an error or request a change, please contact air@careervillage.org.