2 ms·
Ask HN: Will pentesting experience be valuable as a developer?
Hey HN,
I couldn't find the answers via Google, so I'm asking you.
I'm at the start of my career and I'm taking a break from interviewing. Companies say I can solve problems but I don't have enough experience. I recently had a brutal "lack of experience" rejection from a US based company after their on-site interview (I'm European). Other than that, 100 applications were rejected, and I rejected 2 companies myself tbh.
So yea, a break.
A friend of mine wants to become a pentester, and I really love help him to learn it faster since he's busy for about a year now (completely self-taught). I did some heavy duty security courses in my master, which gives me another perspective on what he does. I've noticed with me that he solves boxes on platforms such as hackthebox.eu a lot faster with me around.
So I decided I would tag along and study for my own OSCP exam as well, in order to help him, to have some fun and to simply feel that I'm capable of something again (my confidence has taken a hit tbh).
I'm noticing that I find pentesting as fun as development, and with my friend together it's a lot more fun! The past 2 weeks I've been making 16 hour days and not even noticing it. Hacking boxes feels like playing a computer game.
But I also see some issues with pentesting such as: it's a more passion-driven field than development. And I'm the person that needs work to be work. Moreover, while I have passion for it now, I don't think that will stay. I think it would be fun to do for 2 to 3 years and then switch back to development.
Will the pentesting experience be valued when I apply as a developer? Or are there jobs where you could do both?