Building and Enabling an Internal OT Penetration Testing Team

The contract seeks to establish and enhance the Port Authority of New York and New Jersey’s internal operational technology red team through comprehensive coaching, mentorship, and curriculum development. The goal is to build sustainable, in-house capabilities for penetration testing within OT environments, ensuring the agency can proactively identify and mitigate vulnerabilities in critical infrastructure systems. The effort focuses on developing tailored training programs and fostering hands-on expertise among internal personnel to enable long-term self-sufficiency in cybersecurity operations specific to operational technology. The opportunity is structured as a subcontract with a NAICS code of 611511, indicating it falls under other schools and instruction services, and is open for responses until August 4, 2026. The work will be conducted in support of the New York office of the Port Authority, though no specific location details are provided. Interested parties are directed to the BonfireHub platform for submission details, with no set-aside provisions or organizational type restrictions indicated. The contract emphasizes capacity building rather than external service delivery, requiring a deep understanding of OT systems and the ability to transfer knowledge effectively to internal teams.