Alexander Sobhani

Background

About Alexander Sobhani

Senior Cyber Security Leader with extensive experience designing, implementing, and operating enterprise security architectures across cloud, endpoint, identity, and network domains within highly regulated financial environments.Expertise includes incident response, threat hunting, and detection engineering, with a focus on identifying advanced threats, reducing attacker dwell time, and improving overall security posture. Proven ability to manage the full incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident analysis.Strong background in SIEM and endpoint security platforms, leveraging Splunk for centralized log aggregation, correlation, and detection engineering, and CrowdStrike Falcon for endpoint visibility, threat detection, and response. Experienced in integrating threat intelligence into investigations and mapping adversary activity to MITRE ATT & CK to enhance detection and response strategies.Demonstrated success in designing and enforcing Zero Trust architectures, integrating identity, endpoint, and network security controls including SSO, MFA, PAM, NAC, VPN, and CASB technologies. Skilled in securing hybrid and cloud environments across AWS, Azure, and GCP.Extensive experience supporting and leading security initiatives aligned with PCI DSS 4.0.1, NIST 800-53, and FedRAMP, including control validation, risk assessments, and audit readiness. Proven track record of reducing audit findings, improving remediation timelines, and implementing scalable, automation-driven security solutions.Technical strengths include security automation and DevSecOps, with hands-on experience in Python, PowerShell, and Bash for tool integration, workflow automation, and operational efficiency.Core Competencies:Incident Response • Threat Hunting • SIEM & Detection Engineering • Endpoint Security (EDR/XDR) • Identity & Access Management (SSO, MFA, PAM) • Zero Trust Architecture • Cloud Security (AWS, Azure, GCP) • Vulnerability Management • Security Automation • DevSecOps • Compliance & Risk Management