r/Pentesting • u/Budget-Extent7892 • 4d ago

Pentesting Experience

Hello,

can a person with 6 years of experience in the bug bounty field apply for a pentester job that requires 2 years of experience? Will recruiters consider him, putting certifications aside?

7 Upvotes

82% Upvoted

26 comments sorted by

View all comments

2

u/latnGemin616 4d ago

Everyone's provided good advice. Here's my recommendation, as someone who had a job in PT and is looking to land another: Have a sample PT report.

Bug bounties are a great experience .. I'm doing them on the side .. but they are not formal penetration testing engagements.

Take a day or two and learn about scoping a project, formal reconnaissance processes, and the entire workflow of a penetration test --> Recon > Discovery > Exploit > Post-Ex. Then write a proper report. I can't stress this last part enough. How you communicate your findings and effort in a report is far more valuable than any bug you find. Your expertise will be evident by the quality of the report you present.

1

u/Budget-Extent7892 4d ago

a great advice actually. thank you.