Mohiuddin Sohel, Ph.D.

Analyzes next-generation firewall configurations to identify policy weaknesses, unintended exposure, and gaps in security-control enforcement.

• • Evaluate firewall rules, policy behavior, and configuration effectiveness.
• • Identify potential exposure paths and inconsistent security policies.
• • Translate configuration findings into actionable remediation priorities.

Connects vulnerability information with technical and threat context to support risk-based prioritization.

• • Analyze CVEs, CWEs, affected products, and associated threat intelligence.
• • Enrich vulnerability findings with relevant context.
• • Support vulnerability investigation and remediation decisions.

Develops automated workflows for collecting, enriching, structuring, and interpreting cyber threat intelligence.

• • Process indicators of compromise and structured threat intelligence using STIX.
• • Integrate threat-data sources into automated enrichment pipelines.
• • Apply LLM-based reasoning and evaluation techniques to support security analysis.

Investigates methods for measuring and validating the implementation and enforcement of cybersecurity safeguards.

• • Map security controls to measurable observables and assessment methods.
• • Develop ontology-based representations of security safeguards.
• • Explore LLM-assisted extraction of assessment guidance and metrics.

Engineering experience in cryptographic middleware, certificate management, and smart-card authentication systems.

• • Developed PKI-related middleware and certificate-based authentication components.
• • Worked with PKCS#7, PKCS#11, JavaCard, and OpenSSL.
• • Built cross-platform components using Java, C++, and JNI.