Skip to content
Jay Kawa
resume

Jay Kawa

Security AnalystSOC, DFIR & Threat Detection

Building tools that turn hours of forensic investigation into minutes of automated response.

View ResumeEmail Me
jay@soc:~read-only

whoami --status

status
open to opportunities
location
Pune, India (open to remote)
focus
SOC · DFIR · Threat Detection

Featured work

MyFRT

My First Responder Tool

Karpuragaurai Technologies

Security Engineer

A Python-based digital forensics platform that automates the full evidence lifecycle for real-world incident response — from acquisition through analysis to structured incident reporting. Built around forensic disk image processing across Windows, Linux, and macOS, including BitLocker and LUKS encrypted volumes.

Owns architecture decisions and runs code review and merges across the development team.

the problem

Digital forensic investigations stall in the gap between acquiring evidence and being able to look at it. Analysts move between separate tools to image a disk, verify its integrity, mount it, extract artifacts, and search them — hours before anyone sees a single meaningful artifact. MyFRT collapses that into one automated pipeline.

  1. ACQUIRE
  2. PROCESS
  3. ANALYZE
  4. INDEX & SEARCH
  5. REPORT
  6. DEPLOY
ACQUIRE
Live RAM acquisition via Microsoft AVML and forensic disk imaging in E01 and RAW/DD formats — hash-verified with MD5 and SHA-256, keeping acquisitions forensically sound and provably unaltered from capture onward.
PROCESS
Handles E01 and RAW/DD images across Windows, Linux, and macOS, including BitLocker and LUKS encrypted volumes, plus RAM dump analysis for Windows and Linux.
ANALYZE
Windows Event Log (EVTX) parsing directly from forensic images, YARA-based malware analysis, and password cracking with John the Ripper — artifacts surfaced without manually mounting or exporting the image first.
INDEX & SEARCH
Migrated search and storage from Elasticsearch/MongoDB to OpenSearch and CouchDB, pre-computing indexes during ingestion — near real-time search and near-instant file browsing across 100GB+ datasets.
REPORT
Enhanced HTML reporting engine generating structured, exportable incident reports, plus keyword-scoped exports.
DEPLOY
Packaged as a standalone Windows installer (NSIS) for deployment across analyst workstations.
stack
  • Python
  • Flask REST API
  • JWT auth + RBAC
  • OpenSearch
  • CouchDB
  • YARA
  • John the Ripper
  • NSIS

hours → minutes

manual forensic triage, automated

100GB+

datasets searchable in near real-time

Other projects

Skills

SIEM & Security Analytics
  • Splunk
  • OpenSearch
  • Elastic Stack
  • Wazuh
  • Wireshark
Threat Detection & Response
  • Incident Response
  • Threat Detection
  • Alert Triage
  • Log Analysis
  • EDR
Digital Forensics (DFIR)
  • Autopsy
  • Volatility
  • EVTX Analysis
  • YARA
  • John the Ripper
  • Magnet Forensics
  • FTK Imager
Network & Vulnerability Assessment
  • Snort
  • Nmap
  • OpenVAS
Programming & Automation
  • Python
  • Bash Scripting
  • Flask
  • REST API Development
Databases
  • OpenSearch
  • CouchDB
Operating Systems
  • Linux
  • Windows
  • macOS

Experience & education

  1. Karpuragaurai Technologies

    Nov 2024 — Present

    Security Engineer

    Mumbai, India (Remote)

    Security engineering across DFIR automation and detection tooling, owning architecture decisions for MyFRT.

  2. University of Mumbai

    2020 — 2024

    B.E. Information Technology

    CGPA 8.1 / 10

    Cybersecurity Club Leader

Certifications & training

CTFs
  • TryHackMe
  • picoCTF
  • OverTheWire

Cryptography, web exploitation, Linux command-line security

Get in touch

Open to SOC analyst, security analyst, and security engineering roles, in Pune or fully remote. Email is the fastest way to reach me.

email
jaykawa56@gmail.com
linkedin
linkedin.com/in/jaykawa
github
github.com/Jay8590