Alexander Sobhani

About Alexander Sobhani

Senior Cyber Security Leader with extensive experience designing, implementing, and operating enterprise security architectures across cloud, endpoint, identity, and network domains within highly regulated financial environments.Expertise includes incident response, threat hunting, and detection engineering, with a focus on identifying advanced threats, reducing attacker dwell time, and improving overall security posture. Proven ability to manage the full incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident analysis.Strong background in SIEM and endpoint security platforms, leveraging Splunk for centralized log aggregation, correlation, and detection engineering, and CrowdStrike Falcon for endpoint visibility, threat detection, and response. Experienced in integrating threat intelligence into investigations and mapping adversary activity to MITRE ATT & CK to enhance detection and response strategies.Demonstrated success in designing and enforcing Zero Trust architectures, integrating identity, endpoint, and network security controls including SSO, MFA, PAM, NAC, VPN, and CASB technologies. Skilled in securing hybrid and cloud environments across AWS, Azure, and GCP.Extensive experience supporting and leading security initiatives aligned with PCI DSS 4.0.1, NIST 800-53, and FedRAMP, including control validation, risk assessments, and audit readiness. Proven track record of reducing audit findings, improving remediation timelines, and implementing scalable, automation-driven security solutions.Technical strengths include security automation and DevSecOps, with hands-on experience in Python, PowerShell, and Bash for tool integration, workflow automation, and operational efficiency.Core Competencies:Incident Response • Threat Hunting • SIEM & Detection Engineering • Endpoint Security (EDR/XDR) • Identity & Access Management (SSO, MFA, PAM) • Zero Trust Architecture • Cloud Security (AWS, Azure, GCP) • Vulnerability Management • Security Automation • DevSecOps • Compliance & Risk Management

Experience

1. Senior Cyber Security Analyst

   Capital One

   May 2024 — Present · US

   Lead enterprise incident response across cloud and hybrid environments, performing forensic analysis, threat containment, root cause analysis, and remediationLed proactive threat hunting using Splunk SIEM and CrowdStrike Falcon EDR, leveraging behavioral analytics, IOC sweeps, and anomaly detection to uncover advanced threats and reduce attacker dwell timeManaged full incident response lifecycle (detection, triage, containment, eradication, recovery, and lessons learned) across enterprise environmentsIntegrated threat intelligence into investigations, mapping activity to MITRE ATT & CK, enriching IOCs, and improving detection and response strategiesOwn and operate enterprise-wide security architecture spanning 25+ platforms across endpoint, identity, network, and cloud layersBuilt and enforced Zero Trust architecture, integrating NAC, VPN, CASB, EDR, and identity controlsEngineered SIEM pipelines using Splunk, integrating endpoint, network, and cloud telemetry for real-time threat detection and correlationLed deployment, tuning, and operational ownership of CrowdStrike Falcon EDR, enabling real-time detection, investigation, and responseDirected vulnerability management lifecycle using Qualys, reducing critical vulnerabilities and improving remediation SLAsImplemented secure web and email protections (Proofpoint, Symantec WSS, Bluecoat) to mitigate phishing and web-based threatsAutomated security workflows and compliance tracking, accelerating remediation timelines by 37%Conduct control testing aligned with PCI DSS 4.0.1, NIST 800-53, and FedRAMPDelivered executive-level reporting on enterprise risk posture and control maturity

Education

• Dallas College

  Associate's Degree, Science

  2012 — 2014

• The University of Texas at Dallas

  Bachelor's Degree Candidate , Computer Software Engineering

  2014

Skills

• Css
• Java
• Remote Troubleshooting
• Research
• Service-Now.com
• Mac Os
• Servers
• Sql
• Visio
• Data Analysis
• C
• Powerpoint
• Microsoft Excel
• Microsoft Word
• Public Speaking
• Leadership
• Microsoft Powerpoint
• Databases
• Management
• Printer Support
• Access
• Matlab
• Computer Hardware Assembly
• C
• Programming
• Visual Basic
• Cisco Routers
• Adobe Creative Suite
• Customer Service
• Microsoft Office
• Sales
• Windows
• Javascript
• Desktop Support
• Html
• Active Directory