We sat down with Aleksandr, who works on a red team at an unnamed security agency in Wellington. With her clients' permission, she hacks into their systems and identifies bugs, issues, and escalations that could be exploited by bad actors.

Sure, I'm happy to share my experience and give advice to young people who are interested in pursuing a career in the IT industry.

As you know, I started my career in the hospitality industry, but I always had a passion for technology and problem-solving. So, a few years ago, I decided to make a career change and pursue a job in the IT industry.

It wasn't easy at first. I had to learn a lot of new skills and knowledge, and to adapt to a completely different work environment. But I was determined, and I worked hard to develop the skills and experiences that were needed for a successful career in IT.

As a penetration tester, my day-to-day responsibilities typically involve using a variety of tools and techniques to identify and exploit vulnerabilities in a company's computer systems and networks. This can involve tasks like conducting network scans, running vulnerability assessments, and performing penetration tests to try and gain unauthorized access to sensitive data. In addition to these technical tasks, I also often work closely with other members of the IT team to help them understand and address any security issues that are identified. Overall, it's a challenging and rewarding job that requires a combination of technical skills and problem-solving abilities.

It's difficult to say exactly how many hours I work each week, as the demands of my job can vary depending on the specific projects I'm working on. In general, however, I would say that I typically work around 40 hours per week, which is standard for many jobs in the IT field. Like most jobs, there may be times when I need to put in extra hours in order to meet deadlines or handle urgent issues, but for the most part, my work hours are regular and predictable.

Yes, my job can be stressful at times. As a penetration tester, I am constantly working to identify and exploit vulnerabilities in a company's computer systems and networks. This can be a high-pressure environment, as the stakes are often very high and a single mistake or oversight on my part could have serious consequences. Additionally, the fast-paced nature of the IT industry means that I am always learning and adapting to new technologies and techniques, which can be challenging and stressful at times. Despite these challenges, however, I find my job to be incredibly rewarding and I enjoy the intellectual and technical challenges it presents.

Now, three years later, I'm happy to say that I love my job as a penetration tester. I get to work on interesting and challenging projects, and to use my technical skills and critical thinking to help organizations protect their systems and data from cyber threats.

Penetration testing, also known as "pen testing," is a simulated cyber attack on a computer system, network, or web application to test its defenses. This type of testing is typically done by ethical hackers who are hired by organizations to identify vulnerabilities in their systems and help them improve their security.

Social engineering is a type of psychological manipulation that attackers use to trick individuals into giving them sensitive information or access to protected systems. It often involves exploiting people's trust or lack of awareness to obtain sensitive data or gain unauthorized access to a system.

The amount of social engineering involved in a penetration test can vary depending on the specific goals and objectives of the test. In some cases, the focus may be on technical vulnerabilities, and social engineering may not be used at all. In other cases, social engineering may be a key component of the test, as the goal may be to assess the organization's defenses against this type of attack. Ultimately, the use of social engineering in a penetration test will depend on the specific needs and objectives of the organization.

If I had to give advice to young people who are interested in pursuing a career in IT, I would say that it's important to be passionate and committed. The IT industry is constantly evolving, and it requires a lot of hard work and dedication to stay ahead of the curve. But if you are willing to put in the effort, the rewards can be great.

I would also say that it's important to be flexible and open-minded. The IT industry offers a wide range of career paths, and you may need to try different roles and technologies before you find the right fit. So, don't be afraid to explore different opportunities, and to take risks and challenges that will help you to grow and develop as a professional.

Finally, I would say that networking and collaboration are key. The IT industry is highly collaborative, and you will need to work with a wide range of people, from other IT professionals to clients and stakeholders. So, make sure to build strong relationships and to learn from others who are more experienced than you.

Overall, these are some of the key pieces of advice that I would give to young people who are interested in pursuing a career in IT. I hope that this helps, and good luck with your career!