Cybersecurity · Product · Go-to-market

Cybersecurity
leadership.
From strategy
to execution.

I’m Alexander Sinno. I build security platforms, teams, and businesses across the USA, Europe, and the Middle East, connecting operational expertise with product strategy and commercial execution. At BlueVoyant, I launched two new services and a new platform in two years. My Microsoft security experience spans nearly 900 environments worldwide.

THE OPERATING MODEL / ALEXANDER SINNO
Business outcomes 03 / SCALE
Product & platform 02 / BUILD
Security operations 01 / UNDERSTAND
OPERATIONAL DEPTH.
COMMERCIAL OWNERSHIP.
USA / EUROPE / MIDDLE EAST
$110M

MDR business supported through
product and strategic leadership

Approximate annual revenue · LinkedIn profile
40+

People led across NVISO’s
managed security organization

SOC · Detection engineering · SIEM/SOAR
~900

Microsoft environments worldwide
across my security operations experience

Cumulative experience across roles
01 / Selected work

Built to operate.
Designed to scale.

A career connecting hands-on cyber defense with product strategy, commercial ownership, and organizational growth.

01
BlueVoyant / Product & platform leadership

From managed service to a scalable security platform.

As Director and then VP of MDR Product Management, I led roadmap, investment priorities, pricing, and go-to-market strategy across the MDR portfolio. This work included platform modernization and the development of automation and next-generation security services behind BlueVoyant AI.

  • Led product managers across prevention, detection, and response.
  • Advanced deterministic incident adjudication and automated response.
  • Integrated acquired security capabilities across 1,000+ enterprise customers.
  • Developed emerging offerings for AI agent governance and identity monitoring.
BlueVoyant AI launch · June 2026 ↗
Operating impact

Less manual work.
Stronger unit economics.

Nearly 99%

Reduction in SOC case volume through automation-driven detection, investigation, and response.

~70% gross margin

Contributed to transforming the economics of an approximately $110M MDR business.

Source: LinkedIn profile, October 2026. Results reflect contributions across product, engineering, and security operations.
02
BlueVoyant / Go-to-market & commercialization

Two new services.
One new platform.
Two years.

I connect product development with commercial execution. Over two years at BlueVoyant, I launched two new services and a brand-new platform, taking security capabilities to market alongside my ownership of roadmap, pricing, and go-to-market strategy.

  • Detection as a Service: launched a new detection offering that generated revenue immediately.
  • Agent 365 security service: launched a service around Microsoft Agent 365, extending the portfolio into security for AI agents.
  • BlueVoyant AI: launched a new security operations platform, bringing platform development and service strategy into a broader market offering.

My experience spans what to build, how to position and price it, and how to bring it to customers.

Commercial outcome

From launch
to revenue.

Immediate revenue

Detection as a Service generated revenue immediately after launch, connecting a new offering to paying customer demand.

Portfolio expansion

Two service launches and a platform launch across detection, AI agent security, and security operations.

Launch scope, two-year timeframe, and immediate revenue outcome reflect my account of the work.
03
NVISO / Head of Managed Security Services / 2020–2023

Building a European managed security business.

I owned P&L, strategy, product direction, and operations for NVISO’s managed security business. I built and led a 40+ person organization spanning SOC operations, detection engineering, and SIEM/SOAR, and launched a new 24×7 SOC in Greece.

The operating model combined automation with experienced defenders, connecting service design and commercial growth to the realities of incident handling.

My perspective on building in Greece ↗
External evaluation / OilRig 2022

Detection performance put to the test.

During my tenure, NVISO participated in the inaugural MITRE Engenuity ATT&CK Managed Services evaluation. NVISO’s published results state that the service detected and reported every step of the executed campaign.

NVISO results whitepaper ↗

MITRE Engenuity evaluation archive ↗

Evaluation scope: detection and reporting, excluding prevention and response. The historical MITRE archive is currently unavailable; see NVISO’s published whitepaper.
04
Microsoft Security / Global operations & product leadership

Microsoft expertise.
Built across nearly 900 environments.

Across my career, my monitoring and security operations experience has spanned nearly 900 Microsoft environments worldwide. I bring that operational perspective into security architecture, service design, detection engineering, and product strategy.

  • Microsoft Sentinel and Defender: enterprise deployments, detection, investigation, and response.
  • SOC modernization: SIEM architecture, SOAR workflows, and automated incident handling.
  • Product and service development: translating recurring customer needs into scalable capabilities.
  • AI security: identity monitoring, Conditional Access, and emerging agent governance.

I helped shape an ASIM-first approach to Microsoft Sentinel detection engineering: build on normalized schemas wherever possible, and use native tables where necessary. The strategy reduces duplicated detection logic and makes investigations more consistent across customer environments.

Read my ASIM-first article ↗
Published example

1 rule. 27 products.

Our password-spray example used a single detection rule across 27 authentication products, illustrating how standardization can increase coverage without multiplying engineering effort.

Source: my June 2026 BlueVoyant article. Password-spray detection example.

Role scope and business impact figures are drawn from my LinkedIn profile export, October 2026. The nearly 900 Microsoft environments figure reflects my cumulative experience across roles. Service launch details and commercial outcomes reflect my account of the work. Public articles and evaluation reports are linked alongside the relevant work.

02 / Talks & writing

Ideas from the operation.

Practical lessons on SOC design, automation, Microsoft security, and the responsible use of AI.

More from the archive: Hoplite talks ↗   /   Hoplite blog ↗

03 / Background

Operator.
Builder.
Product leader.

My career spans security operations, consulting, product leadership, and P&L ownership across the USA, Europe, and the Middle East. I have built and led security capabilities in different markets, bringing a global perspective to how teams operate, services scale, and products reach customers.

  • USA: intrusion analysis and security operations at SecureWorks, followed by global MDR product leadership at BlueVoyant.
  • Europe: managed security business leadership at NVISO, a 24×7 SOC launch in Greece, and Microsoft security consulting leadership at BlueVoyant.
  • Middle East: cybersecurity architecture in Qatar and SOC management in Lebanon.

I bring operational experience into product decisions: how a detection is investigated, how a service is delivered, and what it takes to build a business around both. I also teach cybersecurity operations and automation as an adjunct lecturer at the University of Piraeus.

2023–2026
BlueVoyant
VP, Product Management, MDR
Director, Product Management, MDR
Director, Microsoft Consulting Services, EMEA/APAC
2020–2023
NVISO Security
Head of Managed Security Services
2018–2020
Axon Technologies & Coordinates Middle East
SOC management and cybersecurity architecture
2016–2018
SecureWorks
Security operations and senior intrusion analysis
2010–2012
United States Army
201st Expeditionary Military Intelligence Brigade
Start a conversation

Building the next security product, platform, or operation?

Connect on LinkedIn ↗