A security expert shares his experience conducting penetration tests for big banks, tech companies, and enterprises, highlighting the importance of satisfying compliance and determining vulnerabilities from both internal and external perspectives.