Build cyber operations and satellite capabilities that matter.
Sufisec (Sufi Sec) operates on practical technical depth rather than conventional corporate structures. We seek hands-on specialists in Administrative-Level Penetration Testing, high-throughput geospatial satellite engineering, PII Intelligence, and SCADA security.
Open Positions and Specialist Tracks
Senior Red Team Specialist — Enterprise AD and OT/SCADA
Lead adversary emulation and covert intrusion operations across complex Active Directory forests, cloud hybrid topologies, and operational technology (OT/SCADA) environments in critical energy and healthcare infrastructure.
- Deep mastery of Active Directory attack paths (Kerberoasting, ACL abuse, Shadow Credentials, DCSync)
- Experience bypassing modern EDRs with custom C2 infrastructure
- Hands-on familiarity with industrial protocols (Modbus, DNP3, IEC-60870-5-104) and DMZ isolation
- Ability to produce rigorous, executive-grade technical killchain debriefs
Geospatial Pipeline Engineer — Sub-0.5m EO and GIS
Architect and optimize automated satellite data pipelines, processing multi-spectral and panchromatic Earth Observation rasters from Level-0/1 raw downlinks into sub-0.5m orthorectified GeoTIFFs, COGs, and web tile layers.
- Proficiency in Python/Rust with GDAL/OGR, Rasterio, Shapely, and Cloud-Optimized GeoTIFFs (COG)
- Experience building automated orthorectification, pansharpening, and NDVI calculation workflows
- Working knowledge of web map rendering (OpenLayers, MapLibre GL, Slippy Tile servers)
- Familiarity with computer vision segmentation models for automated structural change detection
OSINT and Telemetry Intelligence Analyst
Execute complex target profiling and entity graph correlations across heterogeneous data streams, including cellular CDR feeds, MSISDN/IMEI mappings, identity databases, and regional threat actor communications.
- Extensive experience in OSINT methodologies, dark web investigation, and breach corpus correlation
- Ability to parse, index, and query large datasets (Elasticsearch, PostgreSQL, DuckDB, Neo4j)
- Understanding of cellular network topologies (Cell ID triangulation, LAC, IMSI tracking)
- Disciplined operational security (OPSEC) and handling of sensitive intelligence material
Low-Level Exploit Researcher and Reverse Engineer
Discover novel vulnerabilities in closed-source firmware, kernel drivers, medical IoT devices, and network appliances. Develop weaponized proof-of-concepts and analyze advanced evasion mechanisms.
- Fluency with reverse engineering toolchains (IDA Pro, Ghidra, Binary Ninja, radare2)
- Deep understanding of memory corruption vulnerabilities (UAF, heap overflows, ROP, ASLR/DEP bypass)
- Experience building custom fuzzers (AFL++, LibFuzzer, Honggfuzz) and kernel harnesses
- Proficiency in C/C++, Assembly (x86_64, ARM, MIPS), and Python automation