has a very good post imo presenting what a privacy engineer does [link] But your question is way too broad. I, a privacy engineer, can’t talk about what a pen test security engineer does. Both are doing security engineering