Pen testing and cyber security in general shares characteristics with some other fields in which AI performs well compared to humans: it requires mastery of a body of knowledge that's barely manageable by humans. Law, medicine, and other professions where we send people to graduate school to get good at unnatural mental tasks are similar.
I'd actually argue its the opposite. Pentesting (especially at a basic level) is very repetitive and does not require much knowledge.