ZipRecruiter

Log In

1

Flexible Physical Penetration Testing Jobs (NOW HIRING)

Analygence

Penetration Tester

San Antonio, TX · On-site

... both physical hardware and virtual systems. In support of this mission, Tharros is seeking a ... Conduct and/or support authorized penetration testing on enterprise network assets * Maintain ...

Jimmy Jazz

Penetration Tester

Norfolk, VA · On-site

$85 - $120/hr

... Penetration Tester to support the US Navy with operational test and evaluation support which ... Testing may be against physical, virtualized, or cloud-based systems. This position shall leverage ...

Cymertek Corporation

Penetration Tester

Reston, VA · On-site

$90 - $130/hr

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

Cymertek

Penetration Tester

Chantilly, VA · On-site

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

Cymertek

Penetration Tester

Annapolis Junction, MD · On-site

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

Cymertek Corporation

Penetration Tester

Honolulu, HI · On-site

$120 - $160/hr

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

Cymertek

Penetration Tester

Reston, VA · On-site

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

CACI International, Inc.

Penetration Tester

Chantilly, VA · On-site

$113K - $237K/yr

Proactive interest in emerging technologies and techniques related to penetration testing ... You'll have the autonomy to take the time you need through a unique flexible time off benefit and ...

Cymertek Corporation

Penetration Tester

Chantilly, VA · On-site

$110 - $170/hr

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

Cymertek

Penetration Tester

Tysons, VA · On-site

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

Peraton

$86 - $138/hr

Hybrid - flexible as long as person can come on-site as & when needed. In this role, you will ... Minimum of 2 years with penetration testing experience. * Possess one of the following ...

Cymertek Corporation

Penetration Tester

Aurora, CO · On-site

$90 - $130/hr

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

CACI

Penetration Tester

Chantilly, VA · Hybrid

$113K - $237K/yr

Proactive interest in emerging technologies and techniques related to penetration testing ... You'll have the autonomy to take the time you need through a unique flexible time off benefit and ...

Cymertek

Penetration Tester

Honolulu, HI · On-site

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

Cymertek

Penetration Tester

Aurora, CO · On-site

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

Cymertek

Penetration Tester

San Antonio, TX · On-site

Proficiency in penetration testing tools like Metasploit, Burp Suite, or Nessus * Strong ... Flexible Work Schedule * Cafeteria Style Benefits * 10% - 401k Matching (Vested Immediately)

previous page

Showing results 41-60

All Jobsremote JobsTechnology JobsNetworking JobsCyber Security Engineer JobsFlexible Physical Penetration Testing Jobs

Flexible Physical Penetration Testing information

See salary details

$11K

$109.6K

$183.5K

How much do flexible physical penetration testing jobs pay per year?

As of Sep 5, 2026, the average yearly pay for flexible physical penetration testing in the United States is $109,565.00, according to ZipRecruiter salary data. Most workers in this role earn between $80,000.00 and $143,000.00 per year, depending on experience, location, and employer.

What is flexible physical penetration testing?

Flexible physical penetration testing is a security assessment where professionals attempt to bypass a facility's physical security measures, such as locks, access controls, and surveillance, to identify vulnerabilities. The 'flexible' aspect means the scope, timing, and methods can be tailored to the organization's unique needs and changing requirements. This type of testing helps businesses understand how well their physical security controls protect against unauthorized access, theft, or sabotage. The results are used to improve defenses and reduce risks to people, assets, and sensitive information.

What are the key skills and qualifications needed to thrive as a flexible physical penetration tester?

To thrive as a Flexible Physical Penetration Tester, you need a strong understanding of security protocols, physical security systems, and risk assessment, typically supported by certifications like OSCP or relevant security credentials. Familiarity with lock-picking tools, surveillance equipment, RFID cloning devices, and reporting systems is essential. Critical thinking, discretion, adaptability, and clear communication are standout soft skills in this role. These skills and qualities are vital to accurately identify vulnerabilities, maintain professionalism, and effectively communicate security risks to clients.

What are some common challenges faced by professionals working in flexible physical penetration testing roles?

Professionals in flexible physical penetration testing often encounter challenges such as adapting to diverse client environments, managing unpredictability in site access, and maintaining operational security while working irregular hours. Because assignments may vary from office buildings to industrial sites, testers must quickly assess and respond to unique physical security controls and employee behaviors. Collaboration with remote teams and thorough post-test documentation are also essential to ensure findings are communicated clearly and improvements are effectively implemented.

What is the difference between Flexible Physical Penetration Testing vs Physical Security Specialist?

AspectFlexible Physical Penetration TestingPhysical Security Specialist
CertificationsOSCP, CEH, CISSPCPP, PSP, PSP
Work EnvironmentSimulated attacks on physical security systems, often on client sitesDesigning, implementing, and managing physical security measures
Employer & Industry UsageCybersecurity firms, consulting companies, security testing providersCorporate security departments, government agencies, private security firms

Flexible Physical Penetration Testing focuses on simulating real-world physical security breaches to identify vulnerabilities, often involving hands-on testing. Physical Security Specialists develop and maintain security protocols and infrastructure. While both roles require security certifications and involve physical security, penetration testers emphasize testing and identifying weaknesses, whereas specialists focus on prevention and management.

What cities are hiring for Flexible Physical Penetration Testing jobs?

Cities with the most Flexible Physical Penetration Testing job openings:

What are the most commonly searched types of Physical Penetration Testing jobs?

The most popular types of Physical Penetration Testing jobs are:

What states have the most Flexible Physical Penetration Testing jobs?

States with the most job openings for Flexible Physical Penetration Testing jobs include:

Flexible Physical Penetration Testing jobs near you

Penetration Tester

Analygence

San Antonio, TX • On-site

Full-time

Re-posted 5 days ago

Job description

Description
Are you a problem solver? Do you like complex, challenging puzzles? This position involves a blending of several disciplines to include, but not limited, penetration testing, reverse engineering, and code/script development. In this role, you will apply your talents to reverse engineer executables to identify flaws and create and operationally test exploits to take advantage of an identified vulnerability or zero days.
The Air Combat Command's 67th Cyberspace Wing (67 CW), 346th Cyber Test and Evaluation Squadron (346 CTES), executes, and contributes as both an operational and participating test organization in a full array of operational tests of various cyber weapons in coordination with the 318 Range Squadron (318RANS) who provides instrumented cyber range services, through both physical hardware and virtual systems.
In support of this mission, Tharros is seeking a Penetration Tester (PT) to conduct assessments of threats and vulnerabilities; determine deviations from acceptable configurations, enterprise, or local policy; assess risk levels; and recommend/develop appropriate mitigation countermeasures in operational and nonoperational situations. The PT also performs assessments of systems and networks within the network environment or enclave and identifies where they deviate from acceptable configurations, enclave policy, or local policy and measures effectiveness of defense-in-depth architecture against known vulnerabilities.
Responsibilities include:
  • Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives
  • Analyze software applications to gain an understanding of the system, mission and or application vulnerabilities and exploits
  • Develop exploits for exposed vulnerabilities with a focus on non-interference of mission partner systems and networks
  • Conduct and/or support authorized penetration testing on enterprise network assets
  • Maintain deployable cyber defense audit toolkit (e.g., specialized cyber defense software and hardware) to support cyber defense audit missions
  • Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing
  • Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions
  • Conduct required reviews as appropriate within environment (e.g., Technical Surveillance, Countermeasure Reviews [TSCM], TEMPEST countermeasure reviews)
  • Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications)
  • Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems and processes)
  • Position requires travel up to 25% supporting customer assessments up to 1-4 weeks in duration.

Requirements
  • Current Top Secret clearance with SCI eligibility.
  • Bachelor's degree in a related field and a minimum of 8-12 years of experience providing related penetration testing services.
  • IAT Level III certification required (CASP, CISSP+, CISA, etc.).
  • Experience with computer networking concepts and protocols, and network security methodologies.
  • Understanding risk management processes (e.g., methods for assessing and mitigating risk), laws, regulations, policies, and ethics as they relate to cybersecurity and privacy, cybersecurity and privacy principles, cyber threats and vulnerabilities, specific operational impacts of cybersecurity lapses and application vulnerabilities.
  • Knowledge of cryptography and cryptographic key management concepts, data backup and recovery, host/network access control mechanisms (e.g., access control list, capabilities lists).
  • Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
  • Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML), how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
  • Knowledge of programming language structures and logic, system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
  • Knowledge of systems diagnostic tools and fault identification techniques and what constitutes a network attack and a network attack's relationship to both threats and vulnerabilities.
  • Knowledge of interpreted and compiled computer languages, different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).
  • Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored), system administration, network, and operating system hardening techniques
  • Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
  • Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth), security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).
  • Knowledge of ethical hacking principles and techniques and data backup and restoration concepts, system administration concepts for operating systems such as but not limited to Unix/Linux, IOS, Android, and Windows operating systems and infrastructure supporting information technology (IT) for safety, performance, and reliability.
  • Knowledge of an organization's information classification program and procedures for information compromise, packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
  • Knowledge of cryptology, network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
  • Knowledge of penetration testing principles, tools, and techniques and an organization's threat environment.
  • Knowledge of Application Security Risks (e.g. Open Web Application Security Project Top 10 list).
  • Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems and assessing the robustness of security systems and designs.
  • Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
  • Experience in mimicking threat behaviors, the use of penetration testing tools and techniques and the use of social engineering techniques. (e.g., phishing, baiting, tailgating, etc.).
  • Network analysis tools to identify vulnerabilities. (e.g., fuzzing, nmap, etc.), reviewing logs to identify evidence of past intrusions and conducting application vulnerability assessments.
  • Perform impact/risk assessments and develop insights about the context of an organization's threat environment.
  • Experience with cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation) and the ability to identify systemic security issues based on the analysis of vulnerability and configuration data.
  • Programming language structures (e.g., source code review) and logic and the ability to share meaningful insights about the context of an organization's threat environment that improve its risk management posture.
  • Understanding cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Apply