Physical Penetration Tester

The Physical Penetration Tester assesses the physical access controls across NNPS facilities, testing whether unauthorized individuals could gain access to sensitive areas including server rooms, data center spaces, and administrative offices. All testing is coordinated in advance with NNPS and S1C, conducted within an approved written test plan, and timed to avoid any disruption to school operations or student safety

• Design and execute physical penetration testing scenarios to evaluate physical access controls at NNPS facilities.
• Test badge access systems, entry point controls, tailgating vulnerabilities, and visitor management processes.
• Assess physical security of server rooms, data center spaces, and sensitive administrative infrastructure.
• Coordinate all physical testing timing with the S1C Project Manager and NNPS IT team before any on‑site activity.
• Document all physical access vulnerabilities with specific locations, methods observed, and remediation steps.
• Ensure all activities are conducted within the approved test plan scope — no unauthorized expansion of testing.
• Certify compliance with Virginia Code §22.1-296.1 before conducting any work at NNPS facilities during school hours.

• Demonstrated experience conducting physical penetration tests in institutional or enterprise environments.
• Proficiency with physical security testing techniques including badge cloning, lock assessment, and access control evaluation.
• Strong documentation skills — findings must include specific locations, vulnerability descriptions, and remediation steps.
• Professional discipline to operate within a defined scope in an active school environment.
• No felony convictions; must be able to certify compliance with Virginia Code §22.1-296.1.

• Physical security certifications such as CPP (Certified Protection Professional) or PSP (Physical Security Professional).
• Prior experience conducting physical pen tests at schools, government buildings, or critical facilities.
• Experience coordinating physical testing alongside a concurrent cybersecurity engagement