Heather has been in information security for more than ten years. From help desk and change management to incident response and threat and vulnerability management, this is her first full year as a paid penetration tester. But, based on research, conversations with other pros, and her experience during the first year, she's out for a gut check about what it means to be a pentester.