I am a penetration tester... it's one part of my job (actual title is Security Analyst). I have the CISSP and CEH. Would be glad to answer your questions.