[salamancara]

So I do a similar kind of work, and I have a bit of an advantage since I am a transgender woman. You would never know from looking at me and I did extensive vocal therapy to reach a feminine speaking voice (but I can still use my deep voice as well). I can be John, Lisa, Mike, Amanda; whoever I want by doing just what you say here. I have a few accents I do; but thats more just for fun (it’s a job like any other). You could definitely get by without it though; everyone who does this kind of work has a slightly different methodology they like to use.

Generally this type of on-premise pen testing is a solo enterprise. People working together look suspicious and many of these secure environments require you to lock up your cell phone — so using a phone to communicate with a partner would raise red flags.

I mean, I work with other people on the overall assessment, but the site entry part is necessarily pretty sensitive so usually only the head of security at the client is in the know (that way if I get caught, I don’t get shot — though that is less of an issue now as a woman).