Cybersecurity Assessment & Penetration Testing

This subcontract for Cybersecurity Assessment and Penetration Testing involves providing independent security validation for prime contractors working on Massport EAM projects. The selected provider will be responsible for conducting annual security assessments, which include static and dynamic analysis, penetration testing, and vulnerability scanning. All work must be performed in accordance with OWASP and CERT guidelines, with final deliverables consisting of detailed Security Assessment Reports and Vulnerability Remediation Plans. To qualify for this engagement, the contractor must possess a Certified Ethical Hacker certification and demonstrate a strong working knowledge of NIST 800-82r3. The opportunity is managed by the Massachusetts Port Authority under NAICS code 541519, with a response deadline set for December 17, 2026.