"penetration tester" is far more amusing than "information security professional"