Teach machines to understand my language and my people.> Teach machines to understand my language and my people.
Build what they can trust.> Build what they can trust.
Guard what no one sees.> Guard what no one sees.
I don't sheathe the blade until it's kept.> I don't sheathe the blade until it's kept.
Muhtasim Ibteda Shochcho. Engineer. Researcher. Still training.
EP.03 // BLADE I
Research.
I want to know how machines think, and whether they understand us.> I want to know how machines think, and whether they understand us.
CITATIONS
032
H-INDEX
02
PUBLICATIONS
05
CASE 012025 // IJCNLP-AACL 2025SOMAJGYAAN: A Dataset for Evaluating LLMs on Bangla Culture, Social Knowledge, and Low-Resource Language Adaptationসমাজজ্ঞান
AUTHORS
Fariha Anjum Shifa, Muhtasim Ibteda Shochcho, Abdullah Ibne Hanif Arean, Mohammad Ashfaq Ur Rahman, Akm Moshiur Rahman Mazumder, Ahaj Mahhin Faiak, Md Fahim, M Ashraful Amin, Amin Ahsan Ali, AKM Mahbubur Rahman
ABSTRACT
A benchmark for evaluating large language models on Bangla cultural knowledge, social commonsense, and low-resource linguistic nuance.
MY PART
Dataset design, evaluation framework, analysis.
IMPACT
Introduces a large cultural reasoning benchmark for Bangla.
CASE 022025 // CHI EA 2025Improving User Engagement and Learning Outcomes in LLM-Based Python Tutor: A Study of PACE
AUTHORS
Muhtasim Ibteda Shochcho, Mohammad Ashfaq Ur Rahman, Shadman Rohan, Ashraful Islam, Hasnain Heickal, AKM Mahbubur Rahman, M Ashraful Amin, Amin Ahsan Ali
ABSTRACT
A controlled user study on the PACE tutoring system showing improvements in engagement and conceptual understanding through LLM-based guidance.
MY PART
Lead researcher. System design, experiment setup, data collection, statistical analysis.
IMPACT
About 35% improvement in learning outcomes for introductory Python learners.
A structured code generation pipeline from Bangla instructions.
CASE 052023 // ICCSCEFruit Quality Detection and Monitoring System
AUTHORS
Md Maruf Kamran Sohag, Mohammad Ashfaq Ur Rahman, Muhtasim Ibteda Shochcho, Md Ridwan Mahmud, Daiyan Mohammad Shams, Mysha Samiha, Mohammad Rejwan Uddin, Mahady Hasan
ABSTRACT
An IoT-assisted computer vision framework for real-time fruit quality detection and automated classification.
MY PART
Real-time IoT-based fruit quality detection and monitoring system.
IMPACT
End-to-end automated pipeline for fruit quality monitoring.
Paper in. Nothing lost. Nothing waiting.> Paper in. Nothing lost. Nothing waiting.
OFFICIAL PROJECTS 13
AEGIS: Security Operations Platform
STATUS
Pilot
ROLE
Architect & Lead Developer
PERIOD
July 2026 – Present
An open-source security operations platform built on Wazuh for Bangladesh Finance PLC. AEGIS brings endpoint telemetry, YARA malware scanning, two perimeter firewalls, and Microsoft 365 audit logs into one pipeline, then turns raw alerts into scored, explainable incidents an analyst can act on.
Ingests four live telemetry sources: Wazuh/Windows endpoint events, YARA file scans, FortiGate and Palo Alto firewall logs, and Microsoft 365 sign-in audit events
Built the Fusion Triage Engine, which normalizes every source into a unified security record, persists it to an append-only PostgreSQL ledger, and runs every five minutes
Correlation engine groups related events into incident candidates by user session, filtering out machine and service accounts
Versioned, replayable risk scoring (0-100) weighs activity diversity, source diversity, severity, and burst compression, with damping for high-volume noise; high-risk incidents are written back to the Wazuh dashboard
IMPACT Processed hundreds of thousands of events in the office pilot and surfaced real, previously unseen security findings for the network team.
STACK Wazuh, YARA, Python, PostgreSQL, FortiGate syslog, Palo Alto PAN-OS, Microsoft 365 Management API, systemd, Linux
FinX360 Digital Ecosystem
STATUS
Live
ROLE
Developer, IT Division team
PERIOD
September 2025 – Present
Bangladesh Finance PLC's in-house digital ecosystem, a single portal fronting 20 applications (13 internal systems and 7 external links). It began during COVID as a business continuity tool and grew into the backbone of the company's paperless operations.
IMPACT Core of the company's paper-to-paperless transformation.
STACK FastAPI, PostgreSQL, React, Flutter
eKYC Platform & Shared eKYC Hub
STATUS
Live
ROLE
Full-Stack Developer
PERIOD
September 2025 – Present
Mobile and backend KYC solution with face verification, liveness detection, OCR-based NID extraction, and document validation, extended into a shared eKYC hub architecture for three group entities (BFL, BFCL, BFSL).
AES-256-GCM encryption for customer data, JWT with role-based access control
Election Commission NID API integration and maker-checker approval workflow
Real-time liveness detection to prevent spoofing, plus a cloth detection model for dress code compliance
Designed the shared hub with Bangladesh Financial Intelligence Unit (BFIU) compliance in mind
IMPACT Onboarded 10,000+ customers with a 3-minute average KYC time.
Compliance and audit management platform with rule-based findings from policy documents, risk assessment, role-based access, analytics, and automated audit trails.
Automated rule-based findings across multiple policy documents
Role-based access control for auditors and reviewers
Structured ICT risk inspection with scoring, reporting, and automated inspection summaries.
IMPACT Used across branches for ICT inspections.
STACK FastAPI, PostgreSQL, React
GRC Platform
STATUS
Built, awaiting launch
ROLE
Developer
PERIOD
September 2025 – present
Governance, risk, and compliance system supporting the company's regulatory and internal control processes.
STACK FastAPI, PostgreSQL, React
DGServices: Centralized Authentication
STATUS
In development
ROLE
Developer
PERIOD
2026
Single sign-on and centralized authentication service shared across the company's internal applications.
STACK FastAPI, PostgreSQL, JWT
Phishing Automation System
STATUS
In development
ROLE
Lead Developer
PERIOD
2026
In-house phishing simulation platform built from scratch for the October Cyber Security Awareness program. Designed as an employee-friendly awareness assessment rather than a gotcha.
Campaign setup with link and attachment phishing scenarios
Post-click reveal experience that teaches in the moment
One-click phishing reporting and gamification
IT-monitored dashboard and governance controls
FINIX Super App (Admin & Customer Portals)
STATUS
In development
ROLE
Backend Developer
PERIOD
January 2026 – Present
Backend for the company's customer-facing super app, comprising an Admin Portal and a Customer Portal.
Meeting Minutes Generator
STATUS
In development
ROLE
Backend Developer
PERIOD
March 2026 – Present
Backend for automated generation of structured meeting minutes.
Lead Management System
STATUS
Live
ROLE
Backend Developer
PERIOD
June 2025 – 2026
CRM backend (the LMS module of FinX360) with OTP authentication, audit logging, and lead pipeline management.
OTP authentication and role-based access
Comprehensive audit logging
Lead scoring, pipeline automation, email and SMS notifications
IMPACT Managing 10,000+ leads with a 40% conversion improvement.
STACK FastAPI, PostgreSQL, Redis, OAuth, React
Asset Management Systems
STATUS
Live
ROLE
Backend Developer
PERIOD
May 2025 - 2026
IT asset tracking with risk and criticality scoring and lifecycle management, plus a Fixed Asset Management Module.
IMPACT 200+ assets tracked across departments.
STACK FastAPI, PostgreSQL, React, TypeScript
XBroker: AI-Powered Broker Portfolio Analyzer
STATUS
Live
ROLE
Lead Developer
PERIOD
June 2025
PDF ingestion and AI summarization system that generates structured broker profiles and insights.
PDF parsing pipeline for unstructured broker documents
RAG-based portfolio summarization into structured JSON profiles
IMPACT 500+ broker portfolios processed; manual profile work reduced by 80%.
The company slept. Nothing happened. That was the job.> The company slept. Nothing happened. That was the job.
HOW IT IS SCORED
0-100
activity diversity
source diversity
severity
burst compression
damping: high-volume noise
Explainable by construction, with no LLM or GPU dependency
CASE FILE
AEGIS: Security Operations Platform
STATUS
Pilot
ROLE
Architect & Lead Developer
PERIOD
July 2026 – Present
An open-source security operations platform built on Wazuh for Bangladesh Finance PLC. AEGIS brings endpoint telemetry, YARA malware scanning, two perimeter firewalls, and Microsoft 365 audit logs into one pipeline, then turns raw alerts into scored, explainable incidents an analyst can act on.
Ingests four live telemetry sources: Wazuh/Windows endpoint events, YARA file scans, FortiGate and Palo Alto firewall logs, and Microsoft 365 sign-in audit events
Built the Fusion Triage Engine, which normalizes every source into a unified security record, persists it to an append-only PostgreSQL ledger, and runs every five minutes
Correlation engine groups related events into incident candidates by user session, filtering out machine and service accounts
Versioned, replayable risk scoring (0-100) weighs activity diversity, source diversity, severity, and burst compression, with damping for high-volume noise; high-risk incidents are written back to the Wazuh dashboard
Explainable by construction, with no LLM or GPU dependency
High-level design mapped to the Bangladesh Bank ICT Security Guideline v4.0
IMPACT Processed hundreds of thousands of events in the office pilot and surfaced real, previously unseen security findings for the network team.
Thesis: PACE: Python AI Companion for Enhanced Engagement
2023
Undergraduate Researcher
Sep 2023 – Dec 2024
Undergraduate thesis on LLM-powered Python tutoring and human-AI interaction in learning environments.
2024
Junior ML Engineer
Jan 2024 – Jul 2024
Built machine learning models for malaria risk prediction in a global, impact-driven collaboration.
2025
Research Intern
Jan 2025 – Present
Conducting research on NLP, LLMs, and educational AI with a focus on Bangla and AI-powered tutoring systems.
Software Engineer (Intern)
Apr 2025 – Aug 2025
Contributed to enterprise audit automation, internal inspection tools, and secure customer onboarding modules using AI-assisted workflows.
Software Developer (Officer Grade-I), IT Division
Sep 2025 – Present
Designing and building the in-house systems behind Bangladesh Finance PLC's paperless, green, and cyber-secured digital transformation, from customer onboarding and document workflows to security operations.
EP.07 // TRAINING LOG
Training Log.
Every day. Even when no one is watching.> Every day. Even when no one is watching.