Security Researcher · NGFW Configuration Analysis · Vulnerability Analytics
Analyzes next-generation firewall configurations, vulnerability data, and cyber threat intelligence to identify control gaps, prioritize exposure, and support remediation.
Current work prioritizes NGFW configuration analysis, followed by vulnerability analytics and CTI analytics, with AI-assisted workflows supporting investigation and validation.
At a glance
About
Security researcher specializing in NGFW configuration analysis, vulnerability analytics, and cyber threat intelligence.
Current work examines firewall policy behavior and configuration gaps, connects vulnerability findings to exposure and remediation priorities, and enriches CTI for investigation.
AI-assisted workflows use few-shot prompting, structured reasoning, and LLM-as-a-judge approaches to support analysis and validation.
Selected work
Focused work across firewall configuration assessment, vulnerability prioritization, CTI enrichment, and control validation.
Analyzes next-generation firewall configurations to identify policy gaps, unintended exposure, ineffective controls, and remediation opportunities.
Interprets vulnerability, asset, and exposure context to distinguish urgent risk from low-value findings and guide remediation decisions.
Transforms cyber threat intelligence into structured signals for investigation, enrichment, ATT&CK mapping, and AI-assisted reasoning.
Developed approaches to determine what to measure, how to measure it, and which metrics best assess the enforcement of critical security controls.
Worked on cryptographic middleware libraries and smart payment card solutions involving PKI integration, authentication workflows, and secure system interoperability.
Experience
Stealth Security Startup · Current
University of North Carolina at Charlotte
Kona Software Lab Ltd., Dhaka, Bangladesh
Nascenia, Dhaka, Bangladesh
Publications
Research spanning security-control validation, distributed threat hunting, CTI extraction, and adversarial analysis.
ACM SACMAT
LLM-assisted extraction of measures, metrics, and implementation guidance for validating critical security controls.
PhD Dissertation
A distributed monitoring architecture for scalable threat hunting with timely detection and lower resource overhead.
ESORICS CBT
Analysis of a poisoning attack capable of disrupting public cryptocurrency mining pools by implicating benign miners.
ACSAC
Automated extraction of threat actions from unstructured cyber threat intelligence reports.
Education
University of North Carolina at Charlotte
Bangladesh University of Engineering and Technology (BUET)
Focused on computer science fundamentals, software systems, and applied computing.
Skills
Programming & Development
Security & Analytics
AI & CTI
Platforms & Security Tooling