They use their hacking skills to help identify vulnerabilities in a system's security with the goal of fixing them.