I got an entry-level penetration tester job, but a lowball salary?!

[Tinkeric]

Hi everyone,

I just negotiated an offer to be an entry-level penetration tester, which I'm excited about, but I'm concerned that I may have taken a salary that's way too low.

I'll be making $56k, but according to my research, an entry-level pen tester salary is around $65k. (http://www.payscale.com/research/US/Job=Penetration_Tester/Salary/163f8fe3/Entry-Level and http://resources.infosecinstitute.com/penetration-tester-salary/).

If my salary is way below the average, that would be mostly my fault because I made every mistake in the book during the interview and negotiation process. I gave a desired salary range up front, and of course they offered the minimum of my range. I already signed their counter offer, so there's no going back.

At the same time, I'm coming into this job with very little pen testing experience. I have my A+, Network+, Security+, and was a Systems Administrator for 3 years. Maybe $56k is pretty good for entry-level infosec? (I read a thread here that says 50-60k is about right. http://www.techexams.net/forums/jobs-degrees/88164-information-security-entry-level-pay.html)

I'm excited and thankful to start a infosec job though!

What do you think? Thanks.

 

[SAWYER]

So will you have to buy your own lube for all the penetration you will be receiving? If so, you need to complain about that to HR

 

[HN]

i don't get the question. you know you're getting lower and signed on. probably should have been asked before signing.

 

[Red Storm]

If you think you got lowballed and it's your own fault, your best bet is to do a kick ass job and after year when you do your annual review and/or raise negotiation you can try to work that rate up.

 

[BoomerD]

Getting paid to be penetrated is considered to be prostitution...and illegal in most places.

 

[Tinkeric]

i don't get the question. you know you're getting lower and signed on. probably should have been asked before signing.

I know I made mistakes during the negotiations. I had no negotiation experience though, but I also didn't do my research.

I was mostly focused on preparing for the interview and then not losing the offer.

I actually only signed and submitted the offer a few days ago. I haven't started the job yet. Maybe I can try to re-open the salary negotiation? Or maybe $56k is decent for an entry-level pen tester?

Yes, I know I'm an idiot. This was a learning lesson.

 

[alkemyst]

The best way to a good salary in the future is to come into any new job as high as possible in the salary range you can.

 

[NikolaeVarius]

An average is just that, an average.

 

[Red Storm]

Maybe I can try to re-open the salary negotiation?

I doubt it, and it wouldn't look very good. Either give up the job, or just do a very good job your first year and then revisit the salary negotiation.

 

[ultimatebob]

If you think you got lowballed and it's your own fault, your best bet is to do a kick ass job and after year when you do your annual review and/or raise negotiation you can try to work that rate up.

And if it's like most companies, they'll give him a nice "thank you for your hard work, now work even harder!" style form letter to go with his 2% cost of living adjustment "raise".

This poor guy probably won't make any real money until his first promotion or when he finds a new job. Look at the bright point... at least he'll get some experience in his field.

 

[Red Storm]

And if it's like most companies, they'll give him a nice "thank you for your hard work, now work even harder!" style form letter to go with his 2% cost of living adjustment "raise".

This poor guy probably won't make any real money until his first promotion or when he finds a new job. Look at the bright point... at least he'll get some experience in his field.

Yeah that can also happen. I made the same mistake in a previous job, settled on a lower salary offer because I was more worried about losing the job opportunity. I just focused on my work as best I could to beat expectations, then after a year I managed to negotiate a 6% raise, and 5% the next year. I left them after the third year for bigger and better opportunities, but the point is there is hope, depends on the company.

 

[CraKaJaX]

Are you on the giving or receiving end?

 

[HN]

And if it's like most companies, they'll give him a nice "thank you for your hard work, now work even harder!" style form letter to go with his 2% "raise"/cost of living adjustment.

This poor guy probably won't make any real money until his first promotion or when he finds a new job. Look at the bright point... at least he'll get some experience in his field.

use ['s'] instead of ['strike']

 

[Platypus]

I work in infosec.

That's a pretty low salary to be quite honest, but if you have very little experience and are listing certs like the ones in your OP, it's honestly not that low. What kind of utilization bonuses do you get? Do you get research/conference talk bonuses? White papers? That kind of stuff can definitely add up. Hopefully you negotiate a little better for yourself next time. What kind of pentesting are you doing? App? Network? etc

Out of curiosity, what company? You can PM me if you like.

 

[ultimatebob]

use ['s'] instead of ['strike']

Thanks, I was wondering why that BB code didn't work!

 

[Smoblikat]

And if it's like most companies, they'll give him a nice "thank you for your hard work, now work even harder!" style form letter to go with his 2% "raise"/cost of living adjustment.

This poor guy probably won't make any real money until his first promotion or when he finds a new job. Look at the bright point... at least he'll get some experience in his field.

I have been working my ass off for years and have received no "cost of living" raise (or any raise), or even a "Nice work" emial/notion

 

[smackababy]

Here is the reality: you're going to have to either find another company or get a new position. They won't give you more than a few percent raise per year, and it will be less than inflation. They don't have to renegotiate.

While, you might be making less than the average, you are still making something. An extra $10k per year isn't going to significantly alter your lifestyle anyway. Just grind it out a couple years and find a new company, applying for more experience requiring positions.

 

[lupi]

Maybe you lost a percentage due to the warts?

 

[Insomniator]

What were you making in IT before? You shouldn't take pay cuts when changing jobs in IT even if its a new area. Its not like your old experience isn't at all applicable....

 

[etrigan420]

I did some penetration testing on my wife last night...the old girl is a trooper.

Full disclosure: I pay her a lot more than $56k, and she doesn't even have the low level certs you mention.

 

[MustISO]

If it's the area of IT you're really interested in, just be glad you got a job. It can be pretty competitive in this area and while companies are looking to lowball there are tons of people who can't find a job. Get some experience and in six months request a salary review if you feel you're not being compensated appropriately. If after a year, you're doing really well and still not getting a raise then find another company who will pay more.

 

[inachu]

At least you learned your lesson that you should have moved your compensation window up just a tad.

 

[dave_the_nerd]

If you're young/inexperienced enough to list an A+ on your resume, $56k is awesome.

Be happy with the job, tinker with as much as possible for the experience, take every training opportunity you can to be "useful" to the company, and get a new job somewhere else in 2-3 years for 1.5x - 2x the pay.

 

[moonbogg]

Yeah don't expect a big raise from the same company. Most of the time you need to leave and go somewhere else.

 

[Tinkeric]

Hey everyone,

Thanks for the advice. I definitely screwed up the salary negotiation, but it seems like I still have a good opportunity to get valuable experience and training.

I figure I'll work hard for 6 months and then see if the company is willing to raise my salary to the regional average, whatever that is. After a year, maybe the company will give me a new position with the right salary, or I'll just have to switch to a new company and make sure I don't make the same negotiation mistake again!

I haven't even started at this company yet, so I'm somewhat tempted to re-open the negotiation and maybe bluff that I have another offer, but that might blow up in my face.

Platypus, I don't have enough posts to send a PM. Do you have a junk/spam e-mail address I can contact you at?