<story><title>So You Want to Be a Penetration Tester?</title><url>https://jhalon.github.io/becoming-a-pentester/</url></story><parent_chain></parent_chain><comment><author>bjornedstrom</author><text>I think the article overlooks the value of strong fundamentals. If you deeply understand a specific technology it&amp;#x27;s so much easier than if you have scraped the surface by learning the most common exploits. I find that books, courses and resources about security _specifically_ are often superficial and foregoes deep understanding and instead focus on shallow techniques, tips and tricks. Sure, the tricks are useful, but so much more if they rest on strong foundations.&lt;p&gt;For someone that just want to get a foot in the industry and be useful in some real world scenarios (where knowledge of the most common problems will probably be enough to find real problems) I think this article is a useful resource. But in the long term you will be better and more valuable to skip security resources most of the time and instead go deep in a wide set of areas.</text></comment>
<story><title>So You Want to Be a Penetration Tester?</title><url>https://jhalon.github.io/becoming-a-pentester/</url></story><parent_chain></parent_chain><comment><author>basetop</author><text>Rather than working as a pen tester, I&amp;#x27;d rather work on developing pen testing, auditing, intrusion detection software. A lot of security has been and is going to be automated.&lt;p&gt;And pen testing isn&amp;#x27;t a &amp;quot;sexy&amp;quot; job. Not amongst security and software developers anyway. I see on the same level as QA.</text></comment>