Physical Penetration Tester

Security1stconsulting; Newport News (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Security1stconsulting seeks a seasoned Physical Penetration Tester to evaluate NNPS facilities in Newport News, VA. You will simulate intrusions and test physical access controls to protect server rooms, data centers, and administrative spaces.

Working within an approved test plan, you will coordinate with the NNPS IT team and S1C project manager, document findings with precise locations and remediation steps, and ensure no disruption to students or operations.

Qualifications

• Experience conducting physical penetration tests in institutional or enterprise environments.
• Proficiency with badge testing, lock assessment, and access-control evaluation.
• Strong documentation with findings including locations, vulnerabilities, and remediation steps.
• Ability to operate within a defined scope in an active school environment.

Responsibilities

• Design and execute physical penetration testing scenarios to evaluate physical access controls at NNPS facilities.
• Test badge access systems, entry point controls, tailgating vulnerabilities, and visitor management processes.
• Assess physical security of server rooms, data center spaces, and sensitive administrative infrastructure.
• Coordinate testing timing with the S1C Project Manager and NNPS IT team before on-site activity.
• Document all physical access vulnerabilities with specific locations, methods observed, and remediation steps.
• Ensure all activities are conducted within the approved test plan scope — no unauthorized expansion of testing.
• Certify compliance with Virginia Code §22.1-296.1 before conducting any work at NNPS facilities during school hours.

Skills

Physical penetration testing

Badge access testing

Documentation skills

Security testing techniques

Project coordination

Education

CPP certification (preferred)

PSP certification (preferred)

Tools

Badge cloning

Lock assessment tools

Access control evaluation tools

Job description

The Physical Penetration Tester assesses the physical access controls across NNPS facilities, testing whether unauthorized individuals could gain access to sensitive areas including server rooms, data center spaces, and administrative offices. All testing is coordinated in advance with NNPS and S1C, conducted within an approved written test plan, and timed to avoid any disruption to school operations or student safety

Responsibilities

• Design and execute physical penetration testing scenarios to evaluate physical access controls at NNPS facilities.
• Test badge access systems, entry point controls, tailgating vulnerabilities, and visitor management processes.
• Assess physical security of server rooms, data center spaces, and sensitive administrative infrastructure.
• Coordinate all physical testing timing with the S1C Project Manager and NNPS IT team before any on‑site activity.
• Document all physical access vulnerabilities with specific locations, methods observed, and remediation steps.
• Ensure all activities are conducted within the approved test plan scope — no unauthorized expansion of testing.
• Certify compliance with Virginia Code §22.1-296.1 before conducting any work at NNPS facilities during school hours.

Requirements

Required Qualifications

• Demonstrated experience conducting physical penetration tests in institutional or enterprise environments.
• Proficiency with physical security testing techniques including badge cloning, lock assessment, and access control evaluation.
• Strong documentation skills — findings must include specific locations, vulnerability descriptions, and remediation steps.
• Professional discipline to operate within a defined scope in an active school environment.
• No felony convictions; must be able to certify compliance with Virginia Code §22.1-296.1.

Preferred Qualifications

• Physical security certifications such as CPP (Certified Protection Professional) or PSP (Physical Security Professional).
• Prior experience conducting physical pen tests at schools, government buildings, or critical facilities.
• Experience coordinating physical testing alongside a concurrent cybersecurity engagement