@sparring/tech-roles-library
Version:
Comprehensive tech roles and competencies library for 78 technical roles with 9 career levels each. Includes detailed competencies and career progression paths with complete bilingual support (EN/ES).
259 lines (258 loc) • 8.03 kB
JSON
{
"role": "Penetration Tester",
"category": "Security",
"levels": {
"PT-L1": {
"level": "L1 - Pentest Trainee",
"levelNumber": 1,
"yearsRange": {
"min": 0,
"max": 1
},
"coreCompetencies": [
"Basic knowledge of ethical hacking",
"Elementary understanding of vulnerabilities",
"Ability to use basic tools",
"Basic knowledge of reconnaissance",
"Capability to exploit simple vulnerabilities with guidance",
"Understanding of reporting",
"Documentation of findings",
"Elementary knowledge of remediation"
],
"complementaryCompetencies": [
"Familiarity with Kali Linux",
"Basic knowledge of Metasploit",
"Elementary understanding of scripting"
],
"indicators": [
"Requires constant supervision",
"Executes basic tests",
"Is learning pentesting"
]
},
"PT-L2": {
"level": "L2 - Junior Penetration Tester",
"levelNumber": 2,
"yearsRange": {
"min": 1,
"max": 2
},
"coreCompetencies": [
"Ability to execute complete pentests",
"Implementation of advanced reconnaissance",
"Practical knowledge of exploitation",
"Ability for privilege escalation",
"Understanding of post-exploitation",
"Capability to report findings",
"Knowledge of OWASP testing",
"Ability for network pentesting"
],
"complementaryCompetencies": [
"Knowledge of frameworks (PTES, OSSTMM)",
"Ability for scripting",
"Understanding of wireless security"
],
"indicators": [
"Executes pentests with supervision",
"Identifies critical vulnerabilities",
"Writes technical reports"
]
},
"PT-L3": {
"level": "L3 - Penetration Tester",
"levelNumber": 3,
"yearsRange": {
"min": 2,
"max": 3
},
"coreCompetencies": [
"Design of pentesting methodologies",
"Implementation of advanced exploitation",
"Mastery of red team operations",
"Adversary simulation capability",
"Ability for custom exploit development",
"Deep knowledge of evasion techniques",
"Implementation of social engineering",
"Executive reporting capability"
],
"complementaryCompetencies": [
"Knowledge of malware analysis",
"Ability for tool development",
"Understanding of threat intelligence"
],
"indicators": [
"Leads complex pentests",
"Develops custom exploits",
"Mentors junior pentesters"
]
},
"PT-L4": {
"level": "L4 - Senior Penetration Tester",
"levelNumber": 4,
"yearsRange": {
"min": 3,
"max": 5
},
"coreCompetencies": [
"Architecture of pentesting programs",
"Design of red team strategy",
"Implementation of purple teaming",
"Mastery of advanced persistent threats",
"Full scope pentesting capability",
"Deep knowledge of CVE research",
"Ability for zero-day exploitation",
"Leadership in security assessments"
],
"complementaryCompetencies": [
"Experience in bug bounties",
"Knowledge of vulnerability research",
"Implementation of automation"
],
"indicators": [
"Defines pentesting strategy",
"Leads red team",
"Is a reference in ethical hacking"
]
},
"PT-L5": {
"level": "L5 - Lead Penetration Tester",
"levelNumber": 5,
"yearsRange": {
"min": 5,
"max": 7
},
"coreCompetencies": [
"Technical leadership in offensive security",
"Design of red team operations",
"Management of pentest teams",
"Definition of testing methodologies",
"Campaign planning capability",
"Implementation of purple team exercises",
"Mastery of threat emulation",
"Evangelization of security awareness"
],
"complementaryCompetencies": [
"Experience in APT simulation",
"Knowledge of threat actors",
"Management of tools budget"
],
"indicators": [
"Manages red team",
"Defines offensive security vision",
"Represents pentesting to executives"
]
},
"PT-L6": {
"level": "L6 - Principal Offensive Security Architect",
"levelNumber": 6,
"yearsRange": {
"min": 7,
"max": 10
},
"coreCompetencies": [
"Direction of offensive security strategy",
"Management of red team operations at scale",
"Definition of adversary emulation programs",
"Leadership in security validation",
"Management of bug bounty programs",
"Implementation of continuous pentesting",
"Innovation in attack techniques",
"Management of security research"
],
"complementaryCompetencies": [
"Experience in APT attribution",
"Knowledge of security R&D",
"Leadership in security community"
],
"indicators": [
"Directs offensive security department",
"Participates in strategy",
"Defines pentesting investments"
]
},
"PT-L7": {
"level": "L7 - Director Offensive Security",
"levelNumber": 7,
"yearsRange": {
"min": 10,
"max": 12
},
"coreCompetencies": [
"Executive leadership in offensive security",
"Design of global red team strategies",
"Security validation transformation",
"Management at Fortune 500 scale",
"Creation of adversary-focused culture",
"Definition of offensive roadmap",
"Evangelization at board level",
"Influence in security testing"
],
"complementaryCompetencies": [
"Management of offensive budgets",
"Experience in security unicorns",
"Leadership in hacking community"
],
"indicators": [
"Reports to CISO",
"Manages red team organization (15+ people)",
"Defines offensive strategy"
]
},
"PT-L8": {
"level": "L8 - VP Offensive Security",
"levelNumber": 8,
"yearsRange": {
"min": 12,
"max": 15
},
"coreCompetencies": [
"Strategic vision of offensive security",
"Leadership in security validation",
"Creation of threat-informed defense",
"Management of offensive ecosystems",
"Innovation in attack techniques",
"Definition of next-gen red teaming",
"Evangelization of assume breach",
"Influence in security policies"
],
"complementaryCompetencies": [
"Experience in security giants",
"Advisory in offensive startups",
"Thought leadership in pentesting"
],
"indicators": [
"Is part of executive committee",
"Defines offensive strategy",
"Is recognized leader"
]
},
"PT-L9": {
"level": "L9 - Chief Offensive Security Officer",
"levelNumber": 9,
"yearsRange": {
"min": 15,
"max": null
},
"coreCompetencies": [
"Visionary leadership in offensive security",
"Transformation of security testing",
"Creation of red teaming paradigms",
"Definition of adversary-centric security",
"Innovation in exploitation",
"Evangelization of continuous validation",
"Architect of offensive programs",
"Influence in security standards"
],
"complementaryCompetencies": [
"Experience transforming security validation",
"Recognition as offensive leader",
"Influence in hacking culture"
],
"indicators": [
"Is Chief Offensive Security Officer",
"Defines future of pentesting",
"Is world authority"
]
}
}
}