Skip to main content
Ali Sharafudin

Ali Sharafudin

Cybersecurity Eng. & GRC Analyst

Talent
Pittsburgh, PAMember since June 25, 2026
Risk AssessmentCIS ControlsWiresharkEvent CorrelationBusiness Process MappingLean Value Stream MappingActive DirectoryVirtualizationSystem AdministrationNetworkingIt InfrastructureInformation Securityhelp deskCloud ComputingIncident ResponseThreat Detection
·

Hire this person

Send a job offer directly to this candidate

Risk AssessmentCIS ControlsWiresharkEvent CorrelationBusiness Process Mapping

About

Accomplished Information Systems Specialist and Senior IT Leader with over 15 years of enterprise experience spanning IT infrastructure design, network engineering, and business process mapping & automation. Proven track record managing multi-million dollar data center deployments. Expertly integrates deep technical infrastructure expertise with advanced Security Operations (SecOps), threat detection, and incident response, and Governance, Risk, and Compliance (GRC) frameworks.

Uniquely qualified to secure complex enterprise networks and align technical operations with regulatory and business continuity goals. Possesses a Master of Science in Information Systems (MSIS) and an MBA, with specialized expertise in analyzing regulatory compliance frameworks (NIST, ISO 27001, CIS Controls) and their financial impact on enterprise security. Bridging technical IT knowledge with corporate governance, risk management, and business process optimization.

Adept at conducting risk assessments, evaluating security controls via modern SIEM/EDR architectures, and redesigning business operations to ensure operational continuity and strict regulatory alignment.

Experience

Cybersecurity Eng. & IT Risk Analyst (Intensive Simulation Program) at Per Scholas & Cydeo Security Laboratories (2025-10 – 2026-06)

  • Operated within a live-simulated Security Operations Center (SOC) managing continuous log monitoring, event correlation, and alert validation across enterprise-scale networks.
  • Utilized Splunk and IBM QRadar to construct custom security dashboards, establish alerting thresholds, and identify anomalous authentication vectors and phishing indicators.
  • Deployed CrowdStrike Falcon EDR tools to isolate compromised endpoints, analyze malicious payloads, and run live-system forensics.
  • Evaluated and monitored enterprise security controls using SIEM (Splunk, IBM QRadar) and EDR platforms (CrowdStrike Falcon) to ensure continuous adherence to NIST and ISO 27001 frameworks.
  • Documented, tracked, and remediated mock security incidents using NIST-aligned incident response playbooks, delivering formal compliance and technical reports to executive management.
  • Executed traffic analysis and network forensics using Wireshark to audit network-layer vulnerabilities and isolate data exfiltration risks.

Business Development & IT Solution Manager at Center for Quality & Business Excellence (QUBE) (2008-12 – 2023-07)

  • Identified opportunities for improving business capacity.
  • Delivered Business Process Mapping and Re-design projects: Conducted enterprise-wide risk assessments and redesigned systemic corporate processes utilizing lean technology mapping, systematically recovering $80M in operational capital.
  • Led end-to-end IT Service delivery projects (technology solutions), collaborating with technical, financial and functional stakeholders involving IT infrastructure, network design, ERP/CRM system configuration, and process automation. Ensuring alignment between IT solutions and organizational objectives.
  • Directed the foundational IT governance, enterprise communication platforms, and network security parameters for major corporate startups from inception to launch.

IT Infrastructure Team Leader at Hits-Unitel (Y Telecom) (2007-01 – 2008-11)

  • Led and governed network infrastructure operations, system engineering, and data center buildouts for a major private telecommunications provider under a $10M deployment budget.
  • Designed and implemented secure IT Network (Core & LAN), Sales and Customer Service data network (WAN) POS "Point of Sale".
  • Deployed and launched POS Servers with latest SUN Virtualization system, and Sun Terminal desktop for POS User client.
  • Managed and governed Help desk operations: Enforced continuous core network topology availability of 99.999% through stringent infrastructure controls and Help Desk management.

System Application & Network Engineer at National Tobacco & Matches Co. (NTMC) (2005-08 – 2006-12)

  • Deployed and managed a new ERP systems covering Accounting, Finance, HR, Payroll, Shares & Fixed assets, Logistics, Factory Production and Costing system, improving operational performance and data accuracy.
  • Designed, configured and managed NTMC network topology (LAN & WAN). Connect all branches & main factory to headquarters using frame relay connection.
  • Administered Microsoft Active Directory architectures, enforcing enterprise access controls, group policies, and cross-functional ERP integrations.
  • Managed and monitored help desk operations for Networking and System Application services.

Education

Master of Science in Information Systems – La Roche University (2023-08 – 2026-05)

Master of Business Administration in Business Administration – Maastricht School of Management (2008-06 – 2010-08)

Post Graduate Program in Cloud Computing – The University of Texas, Austin (2022-06 – 2023-03)

Bachelor of Science in Information Technology – Al Balqa Applied University (2001-01 – 2005-05)

Skills

Cybersecurity Eng. & GRC Analyst

Reviews

Related