Alireza Taghikhani

Cloud Security Engineer transitioning from 9+ years in SOC, DFIR, and threat detection into cloud security and DevSecOps. Hands-on experience with Azure security tooling, CSPM/CWPP concepts (including building a private CSPM tool), and public projects covering eBPF-based runtime security (Mace-eBPF) and DevSecOps pipelines (SAST, secret scanning, SCA, IaC scanning). SSCP-certified, foundational AWS knowledge, currently pursuing CKA, Terraform Associate, and AZ-500.

Brings a rare combination for cloud security roles: deep detection-and-response expertise (Splunk ES, EDR, MITRE ATT&CK, NIST SP 800, SOC-CMM, CIS Controls) paired with growing infrastructure and cloud-native security skills. Currently CTO of a healthtech startup, hands-on across secure cloud architecture, infrastructure, and security for an AI-driven healthcare platform.

Chief Technology Officer at SenioSentry (2023-05 – Present)

Startup

• Hands-on ownership of cloud infrastructure and security for an AI-driven elderly-care platform — a small startup team, so directly build, configure, and secure systems rather than delegate.
• Design and operate secure, scalable cloud architecture (containerized services, automated deployments); implement healthcare-grade data privacy, compliance, and security controls for a platform handling sensitive health data.
• Work directly with engineering and AI teams to embed security into the development and deployment pipeline as the platform scales.

Cyber Security Consultant at Turquoise Partners (2024-04 – Present)

Part-time

• Reduced mean time to triage from 6,800 to 340 minutes and mean time to closure from 9,800 to 735 minutes through SOC process redesign, use-case tuning, and detection workflow improvements.
• Advise on SOC maturity using SOC-CMM and CSF v2.0 frameworks; deliver long- and mid-term security roadmaps.
• Implement log clustering and detection use cases using Splunk and Elastic XDR.
• Design threat intelligence workflows and incident response processes.

Cyber Security Instructor at NooraNet (2023-12 – Present)

Part-time

• Deliver professional training in Memory Forensics, Malware Analysis, Splunk ES, and SOC operations.

SOC Manager at Sindadsec (2025-05 – 2025-11)

• Managed SOC operations, oversaw threat detection and incident investigation workflows.

SOC Supervisor at Golrang Industrial Group (2024-07 – 2025-05)

• Tuned and optimized Splunk ES for threat detection and investigation; developed detection use cases.
• Managed and fine-tuned EDR solutions to detect and mitigate active threats.
• Supported SOC analysts in incident investigation and response.

CSIRT Consultant at Golrang Industrial Group (2023-06 – 2024-07)

• Responded to security incidents, conducted threat hunting on Linux/Windows, performed forensic and memory analysis, and authored incident response playbooks.

Cyber Defense Incident Responder at Hamrahe Aval (MCI) (2024-03 – 2024-06)

• Responded to cyber threats using Advanced Threat Analytics (ATA) and Kaspersky Anti Targeted Attack (KATA); technical manager for multiple external security projects.

Digital Forensic Specialist / MSSP Manager at APK Group (Amn Pardazan Kavir) (2021-11 – 2024-03)

• Led the DFIR team responsible for detecting and responding to cybersecurity threats; performed advanced Windows/Linux OS and memory forensics, and malware analysis.
• Led an MSSP team; mentored analysts, built processes based on NIST SP 800, and implemented use cases based on MITRE ATT&CK.

SOC Manager / Information Security Analyst at BIM Bank (2019-04 – 2021-11)

• Led the SOC team, built NIST SP 800-based processes, and operated Sandbox, EDR, Nessus Pro, Burp Pro, and Splunk ES.
• Implemented ELK for security monitoring and detection use cases; monitored threats across 24x7 SOC shifts.

Penetration Tester at Pishgaman Kaipod (2018-09 – 2019-03)

• Conducted OWASP-based penetration testing with Burp Suite Pro and IBM AppScan; deployed ELK and Security Onion.

Master of Business Administration in Business Administration and Management – Mahan Business School (2022-01 – 2023-05)

Bachelor's Degree in Information Technology – Yazd University (2015 – 2019)