Knowbe4 Jobs in Virginia (NOW HIRING)

IT

Location

Work Mode

Employment Type

Experience Level

Security Clearance

Type: Active Secret

Status: Not needed

The Social Engineering and Security Awareness Testing Specialist designs and executes a comprehensive social engineering testing program for NNPS faculty and staff. This goes beyond a basic phishing simulation - you will design targeted campaigns that reflect the actual threat landscape facing school districts, conduct vishing and pretexting scenarios, and coordinate in-person social engineering exercises. You then translate everything you observe into specific, actionable security awareness recommendations that school leadership can implement

• Design and execute targeted phishing simulation campaigns tailored to NNPS staff roles, using approved platforms such as Gophish, KnowBe4, or equivalent.
• Conduct vishing (phone phishing) and pretexting scenarios to test staff responses to social engineering via telephone.
• Coordinate in-person social engineering exercises - including tailgating and impersonation - with the Physical Penetration Tester, within approved test plan scope.
• Establish a communication plan with NNPS that defines who is aware of testing and to what degree, preventing unnecessary alarm while maintaining test validity.
• Track and analyze campaign results including click rates, credential submission rates, and reporting rates by department and role.
• Document all findings with business impact framing that resonates with school administrators, not just IT staff.
• Recommend specific, practical security awareness training improvements based on observed behavior.
• Certify compliance with Virginia Code §22.1-296.1 before any work at NNPS facilities during school hours.

REQUIRED QUALIFICATIONS

• 3 or more years of experience designing and executing social engineering testing programs.
• Hands-on experience with phishing simulation platforms — Gophish, KnowBe4, Proofpoint Security Awareness, or equivalent.
• Experience conducting vishing and pretexting campaigns.
• Strong analytical skills — ability to convert campaign metrics into meaningful, audience-appropriate findings.
• Clear written communication skills for both technical and executive-level reporting.
• No felony convictions; must be able to certify compliance with Virginia Code §22.1-296.1.

PREFERRED QUALIFICATIONS

• CEH or social engineering specialization (e.g., SECC — Social Engineering Certified Course).
• CISSP, Security+, or equivalent certification.
• Prior experience conducting security awareness testing in a K-12 or higher education environment.
• Experience coordinating physical social engineering scenarios alongside a physical pen test team.