Rushi Purohit

About Rushi Purohit

Rushi Purohit is a seasoned cybersecurity expert with over 10 years of experience in various areas such as DevSecOps, application/product security, vulnerability and risk analysis/management, penetration testing, and threat modeling. He also possesses expertise in secure design and architecture review, software security research, system auditing, training, and mentoring. With more than 6 years of experience in technical leadership, project management, and program development, Rushi has a proven track record of leading/managing teams and driving successful projects/programs. Over the past 3+ years, he has also honed his skills as a people manager, demonstrating his ability to balance individual contributions with team leadership to tackle both technical and non-technical challenges. Rushi\'s entrepreneurial mindset fuels his creativity and innovation, as evidenced by the business case he developed for next-generation of streaming.Here are some of the publicly accessible projects that Rushi has either spearheaded or co-led:• CWE Top 25 Most Dangerous Software Weaknesses Lists Published in O’Reilly’s 97 Things Every Information Security Professional Should Know• 2021 CWE Top 25 Most Dangerous Software Weaknesses Podcast• Secure PLC Coding Practices: Top 20 List• A Secure Code Review Retrospective Paper Published in A Secure Code Review Retrospective Presentation Published in MITRE Job Shadowing Program• Union County College Advisory Board Member• Union County College STEM Speaker

Experience

1. Lead Cybersecurity Engineer

   MITRE

   Apr 2021 — Present · Bedford, MA, US

   Digital Identity TPM | FY23 – Present• Facilitate the widespread adoption of digital identities and coordinate cross-functional teams to implement solutions. • Develop a comprehensive Common Fraud Enumeration ontology that enables improved categorization of fraud, identification of fraud similarities across programs and organizations, streamlined investigations.• Coordinate with various stakeholders to ensure alignment of project objectives and deliverables and provide regular updates on project status and progress.Cybersecurity Days Committee Member | FY20 - Present• Strategize and implement a range of cybersecurity presentations and demonstrations in collaboration with the executive team, directors, chief engineers, and other senior staff, showcasing innovative cybersecurity work conducted by MITRE and other organizations.• Drive awareness of cybersecurity challenges and solutions across MITRE, our partners, and sponsors, which subsequently facilitates the selection of new research proposals and the establishment of additional partnerships.CWE Top 25 TPM | FY20 – FY23• Led a team of 8 staff in producing the successful release of a new Top 25 List.• Conducted technical analysis of CVEs for precise CWE mappings and supervised the development of a comprehensive mapping guidance.• Achieved a 5x increase in sponsor investment due to the consistent success of the Top 25.• Established active partnerships with esteemed organizations.• Created outreach opportunities for conference talks, presentations, training sessions, etc.Application Security Lead/Subject Matter Expert | FY18 – FY23• Supervised a cross-functional 10-member team, overseeing operations for efficiency.• Formulated a strategy for advancing the DevSecOps maturity model for an internal program.• Executed a comprehensive cloud security assessment for Azure, AWS, and GCP platforms.• Led 100+ application security projects mitigating thousands of vulnerabilities pre-deployment.

Education

• UCNJ Union College of Union County, NJ

  Associate of Science (AS), Computer Science/Engineering

  2010 — 2013

• Stevens Institute of Technology

  Bachelor's Degree, Cybersecurity

  2013 — 2015

• Southern New Hampshire University

  Graduate Certificate, Nonprofit Leadership