NEW TOOL I built Zero-Trace OT Guard — passive-first OT/ICS network evidence analysis ★ star on github →

$ whoami

SAAD NASIR

aka zero-trace

> ▋

I think like the adversary so defenders don't have to guess. More than a decade of red teaming, adversary emulation and OT/ICS security, with the findings turned into measurable, risk-based improvements that leadership can act on.

view operations open shell_
  • OSCP
  • CRTO
  • CISM
  • PNPT
  • OSWP
operator.profile
┌──(zero-trace㉿redteam)-[~/profile]
└─$ cat operator.json
{
  "handle":    "zero-trace",
  "name":      "Saad Nasir",
  "role":      "Red Team Lead",
  "focus":     ["adversary-emulation",
                "OT/ICS", "purple-team"],
  "experience": "10+ yrs",
  "motto":     "quiet > loud",
  "status":    "available_for_ops"
}
scroll ↓
0+
penetration tests & offensive engagements delivered
360°
targets
any surface: web, API, network, cloud, OT & AD
0%
detection rate across tested ATT&CK techniques
0+yrs
leading red team & offensive security

01. about

I'm an offensive security, OT security and security operations leader. I started in network and database administration, moved into cyber intelligence, and when I was introduced to red teaming I found where I belonged: breaking things on purpose so they don't break by accident.

I've built an enterprise red team program from the ground up, hiring and mentoring operators and running continuous adversary simulation mapped to MITRE ATT&CK. I work closely with executives, engineering, GRC, the SOC and incident response, because a finding only matters once it changes something.

I prefer hard targets that can be compromised without making noise. Account takeover through token manipulation, hunting for hashes, and attack paths nobody mapped are the problems I like most. Today I lead security operations, and I still test hands-on as a freelance pentest team lead, consultant and bug bounty researcher.

Outside work I give back to the community. I founded Security BSides Albuquerque, and I'm the opening batsman on the cricket pitch or out on the golf course.

02. capabilities

[RT]

Red Teaming & Adversary Emulation

Objective-based operations that emulate real threat actors end to end, from initial access to impact, mapped to MITRE ATT&CK.

[OT]

OT / ICS Security

Non-disruptive, safety-first assessments of IT/OT segmentation, remote-access paths, asset visibility, identity and monitoring coverage.

[PT]

Purple Teaming

Live collaboration with the SOC and detection engineers that turns every technique into a tested, tuned detection.

[WA]

Web, API, Network & Cloud

Authorized penetration testing across applications, APIs, auth flows, business logic, infrastructure and cloud-connected environments.

[SE]

Social Engineering

Phishing simulations and awareness programs designed to change behavior, not just generate a report.

[SO]

Security Ops & Risk Strategy

Leading SecOps teams, building incident readiness and metrics, and translating adversarial findings into executive risk decisions.

03. engagement lifecycle

Every operation follows the same discipline, from rules of engagement through to a measurable change in defense. Select a phase to see what happens in it.

phase.info

04. operations log

Clients and employers are kept confidential. Discretion is part of the job.

  1. 2021 — present● active

    Manager, Offensive Security

    // global enterprise IT software vendor

    • Built and led the enterprise Red Team program from zero: hired, mentored and developed offensive operators.
    • Directed red team exercises, penetration tests and ATT&CK-based adversary emulation across products and enterprise infrastructure.
    • Ran continuous adversary simulation that reached a 97% detection rate across tested techniques.
    • Set up purple team practices that cut remediation time from 18 hours to 3.
    • Led phishing programs that brought click rates from 80% to 30% in one year.
    • Drive security operations and incident readiness, turning offensive findings into prioritized, risk-based decisions for leadership.
  2. 2022 — present● active

    Freelance Penetration Tester & Team Lead

    // pentest-as-a-service platform

    • Deliver authorized tests of web apps, APIs, infrastructure and cloud-connected environments.
    • Define engagement objectives, coordinate testers and deliver actionable remediation guidance.
  3. 2022 — present● active

    Offensive Security Consultant

    // independent practice

    • Delivered 800+ engagements: penetration tests, vulnerability and attack-surface assessments, architecture reviews and remediation validation.
    • Write executive-ready reports that connect technical findings to business risk and attack paths.
  4. 2022 — present● active

    Independent Security Researcher

    // major bug bounty platforms

    • In-scope research on auth flows, access control, APIs and business logic, with reproducible PoCs and responsible disclosure.
  5. 2019 — 2021■ concluded

    Offensive Security Engineer

    // U.S. boutique security consultancy

    • Ran infrastructure pentests and vulnerability management for U.S. startups, and led and coached a six-person delivery team.
    • Created ATT&CK-based training content for academic institutions developing future pentesters.
  6. 2014 — 2021■ foundations

    Enterprise IT & Database Administration

    // fortune 500 financial services · enterprise IT

    • Overnight team lead and Tier 2 support across 420+ applications: Citrix VDI, Windows, Linux, macOS and Intune.
    • Senior DBA managing application and server security, SQL, PHP, FTP, wireless and virtual desktops. This is where the attacker mindset began.
ot_ics.rules_of_engagement

⚠ OT / ICS: safety first, always

Authorized assessments of operational technology and industrial control environments, where availability and safety outrank everything.

  • IT/OT segmentation review
  • Remote-access pathway analysis
  • Asset visibility & identity controls
  • Monitoring & IR readiness
  • Non-disruptive, risk-based testing

05. credentials

CRTOCertified Red Team Operator2024
OSWPOffSec Wireless Professional2024
CISMCertified Information Security Manager2023
OSCPOffSec Certified Professional2022
PNPTPractical Network Penetration Tester2021
eJPTJunior Penetration Tester2021
CySA+CompTIA Cybersecurity Analyst2020
CEHCertified Ethical Hacker2019
AWS SAAWS Solutions Architect2019

> arsenal

06. intel & community

article · 2026

From Internet Exposure to Operational Disruption: A Red Team View of Connected Infrastructure

read → article · 2022

Red Teaming vs. Pentesting

read → open-source · author & maintainer

⚡ Zero-Trace OT Guard

A Python tool I built for passive-first OT/ICS network evidence analysis: asset inventory, segmentation review, Modbus/TCP decoding and HTML/JSON/CSV reporting. MIT-licensed.

view on github → contributor · 2025

New Year Evaluation: Best Practices for Pentesting

read → interview

Pentester Spotlight: Origin Story

read →
community

Founder, Security BSides Albuquerque

Building a local community where people share knowledge, mentor the next generation and give back. What you give, you get back.

07. establish connection

Type help to get started, or just use the links below.

guest@zero-trace: ~
contact@saadnasir.com linkedin/iamsaadnasir