Yes, large engagements frequently include a "red team" who's job it is to try and break into the system.