Steven works as a security consultant and frequently performs penetration tests for Fortune 500 companies.Steven runs external and internal tests and then creates reports to show the companies where their weak areas are.Steven always signs a non-disclosure agreement before performing his tests.What would Steven be considered?